nv-generate-mr-brain-finetune
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied MONAI-style datalist JSON files to manage training data. While the wrapper performs path validation, this represents an ingestion point for untrusted data that could influence agent behavior if the JSON fields are manipulated with natural language instructions.
- Ingestion points: The
datalistJSON file is ingested inscripts/run_mr_brain_finetune.pyvia_load_json. - Boundary markers: The skill uses standard JSON parsing but does not implement explicit boundary markers or 'ignore' instructions for the agent when processing the resulting data structures.
- Capability inventory: The skill possesses significant capabilities, including local file writes, network access (to HuggingFace/GitHub), and the ability to execute shell commands via
subprocess.run. - Sanitization: The script validates
modalitystrings against a fixed whitelist (SUPPORTED_MODALITIES) and verifies the existence of image files on disk. - [COMMAND_EXECUTION]: The script
scripts/run_mr_brain_finetune.pyusessubprocess.runto orchestrate multi-step training workflows. It executes Python modules such asscripts.diff_model_create_training_data,scripts.diff_model_train, andscripts.diff_model_inferusingsys.executable. These commands are integral to the skill's purpose of finetuning medical imaging models. - [EXTERNAL_DOWNLOADS]: The skill is configured to download and execute code from an external repository.
- Repository: Fetches the
NV-Generate-CTMRcodebase from theNVIDIA-Medtechorganization on GitHub. - Integrity: The instructions and manifest recommend pinning the download to a specific git commit hash (
61c4ec709b84cad468852243c48e250bec732074) to ensure reproducibility and stability.
Audit Metadata