nvidia-app
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to interact with the NVIDIA App's local MCP server. This includes checking driver status, optimizing game settings, and managing In-Game Overlay features like recording and screenshots.
- Evidence: The
SKILL.mdandreferences/connection.mdfiles describe connecting to a local HTTP endpoint (http://127.0.0.1:13508/mcp) or using a stdio bridge (NvAppMcpServer.exe). - Evidence: The skill defines specific tool contracts (e.g.,
nvapp_overlay_capture,nvapp_client_get_driver_status) for performing these actions. - [SAFE]: All described operations and external resources originate from the vendor's official infrastructure. The skill includes explicit instructions to handle user privacy, such as requiring authorization for capture actions and avoiding the exposure of authentication tokens.
- Evidence: The skill is authored by 'nvidia', and all tools and paths (e.g.,
%ProgramFiles%\NVIDIA Corporation\NVIDIA App\...) are consistent with official NVIDIA software installations. - Evidence: The
SKILL.mdfile contains a dedicated 'Capture and privacy' section that mandates user authorization for recording and screenshots.
Audit Metadata