nemo-fabric-build-adapter
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides development guidelines for NVIDIA NeMo Fabric adapters, focusing on target translation and lifecycle management. It includes explicit security warnings to ensure that sensitive information like credentials, headers, and environment variables are not logged or persisted.
- [EXTERNAL_DOWNLOADS]: All external URL references (e.g.,
github.com/NVIDIA/NeMo-Fabric) point to official repositories of a trusted organization. The documentation also refers to standard vendor-provided packages such asnemo-fabric-adapter-contractandnemo-fabric-adapters-common, which are consistent with the skill's purpose. - [INDIRECT_PROMPT_INJECTION]: While the skill describes an adapter pattern that processes external data (
AgentConfig,AgentRunRequest), it provides clear instructions for boundary enforcement and validation of untrusted values against JSON schemas. It explicitly cautions against silently consuming unsupported fields. - [COMMAND_EXECUTION]: The code examples illustrate standard application logic for target invocation and lifecycle management without using dangerous system calls or shell execution patterns.
- [DATA_EXFILTRATION]: The skill instructs developers to keep installation and environment preparation outside the adapter boundary and mandates the use of isolated mutable states between runtimes to prevent data leakage.
Audit Metadata