nemo-retriever
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and install the NeMo Retriever Library from NVIDIA's official GitHub repository. It also retrieves pre-trained model weights from HuggingFace and package dependencies from official registries like PyTorch and PyPI.
- [COMMAND_EXECUTION]: The skill operates primarily through Bash commands, invoking the
retrieverCLI for document processing and vector search. It utilizes helper Python scripts (filename_fast_path.pyandgrep_corpus.py) that safely manage subprocesses to handle file indexing and search operations. - [PRIVILEGE_ESCALATION]: The installation documentation (
references/install.md) provides commands for installing system-level dependencies such aslibreofficeandffmpegusingsudo apt-get. This is a standard administrative requirement for enabling multimedia and Office document support. - [DYNAMIC_EXECUTION]: Instructions for querying and troubleshooting involve the use of Python one-liners (
python -c "...") to parse and format JSON output from the retriever tools. This facilitates data handling within the CLI workflow. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and process external data (PDFs, images, Office files, etc.). This introduces a potential surface for indirect prompt injection if those files contain adversarial content.
- Ingestion points: User-provided document directories and media files (e.g.,
./pdfs/,./images/,./media/). - Boundary markers: The instructions provide guidelines for synthesizing answers with citations but do not implement explicit boundary markers or delimiters for the retrieved text chunks themselves.
- Capability inventory: The skill uses Bash, Write, and Read tools, allowing for extensive interaction with the local environment.
- Sanitization: The skill does not explicitly describe automated sanitization or filtering of the retrieved content before it is processed by the agent.
Audit Metadata