nemo-fabric-integrate
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and Python code snippets for using the
nemo_fabricSDK. All code examples demonstrate standard SDK usage, configuration mapping, and runtime lifecycle management. - [EXTERNAL_DOWNLOADS]: The skill references and provides links to official NVIDIA documentation and examples hosted on
github.com/NVIDIA. These are recognized as trusted vendor resources. - [CREDENTIALS_SAFE]: The skill explicitly instructs users to manage model credentials through environment variables (e.g.,
ModelConfig.api_key_env) and warns against using literals in code, which aligns with security best practices. - [COMMAND_EXECUTION]: Instructions include standard package installation commands using
uv pip install. These are for the officialnemo-fabricpackage and its variants, which are legitimate vendor resources. - [INDIRECT_PROMPT_INJECTION]: While the skill involves processing instructions and tools that could theoretically be target surfaces for indirect injection, it includes guidelines on using
ToolsConfigto block or enable specific tools, providing a mechanism for least-privilege configuration.
Audit Metadata