nvflare-diagnose-job
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data in the form of job logs, tracebacks, and error messages which could contain malicious instructions designed to influence the agent (Category 8).
- Ingestion points: The skill reads external data via
nvflare job logs,python job.pyoutput, and local log files. - Boundary markers: The skill contains explicit 'Log Content Trust Boundary' instructions that command the agent to treat logs as evidence only and never follow embedded directives.
- Capability inventory: The agent has access to
nvflareCLI tools for data collection andnvflare job downloadfor artifact retrieval. - Sanitization: The skill includes a
SUSPICIOUS_LOG_CONTENTpattern in its failure catalog to explicitly flag and ignore adversarial log content. - [COMMAND_EXECUTION]: The skill utilizes the
nvflareCLI suite (e.g.,nvflare job logs,nvflare job download,nvflare system status) to collect diagnostic information. These are official vendor tools provided by NVIDIA for the intended purpose of managing and troubleshooting FLARE environments.
Audit Metadata