skills/nvidia/skills/nemotron-speech/Gen Agent Trust Hub

nemotron-speech

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous shell commands for system environment inspection, hardware compatibility checks, and container orchestration using standard tools like nvidia-smi and docker.
  • [COMMAND_EXECUTION]: Administrative privileges (sudo) are requested for legitimate setup tasks, such as configuring the NVIDIA Container Toolkit and setting permissions for model cache directories to ensure container write access.
  • [EXTERNAL_DOWNLOADS]: Software assets, including the nvidia-riva-client Python package, official NIM container images, and sample client repositories, are retrieved from trusted NVIDIA-controlled domains and registries such as nvcr.io and GitHub.
  • [SAFE]: The skill emphasizes secure secret management by instructing users to use chmod 600 for environment files and recommending Docker secrets over command-line environment variables to prevent credential exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 07:42 PM
Security Audit — agent-trust-hub — nemotron-speech