nemoclaw-user-reference
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references an installation script hosted at
https://www.nvidia.com/nemoclaw.sh. This is a vendor-provided resource for product installation. - [REMOTE_CODE_EXECUTION]: The command reference includes instructions for a common installation pattern that involves fetching and executing a remote script (
curl -fsSL ... | bash). - [COMMAND_EXECUTION]: The skill provides an extensive reference for the
nemoclawandopenshellCLI tools, covering sandbox lifecycle management, file transfers, state snapshots, and diagnostic procedures. - [COMMAND_EXECUTION]: Troubleshooting sections provide shell commands for managing system services (e.g.,
systemctl), process termination (e.g.,pkill,kill), and user group management (e.g.,usermod), which are intended for host-side configuration and recovery. - [CREDENTIALS_UNSAFE]: The documentation discusses environment variables for API tokens (e.g.,
TELEGRAM_BOT_TOKEN,SLACK_BOT_TOKEN,BRAVE_API_KEY) as part of the configuration guide. No actual hardcoded secrets or credentials are present in the skill content.
Audit Metadata