physical-ai-neural-reconstruction
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to fetch additional instructions and project components from official NVIDIA GitHub repositories, including
nurec-skills,ncore,asset-harvester, andharmonizer. - [COMMAND_EXECUTION]: Routine use of
gitfor version control anddockerfor running reconstruction engines is documented. It also includes standard cleanup commands for managing container-generated files. - [CREDENTIALS_UNSAFE]: The skill demonstrates best practices for secret management by providing safe patterns to verify the presence and length of
HF_TOKENandNGC_API_KEYusing length checks and official CLI tools likehf auth whoamiinstead of echoing their actual values. - [PRIVILEGE_ESCALATION]: The documentation includes the use of
sudo chownspecifically for recovering file ownership of outputs created by Docker containers, which is a standard administrative procedure for these workflows. - [INDIRECT_PROMPT_INJECTION]: The skill functions by reading other local skill files to determine how to route user requests, representing a data ingestion surface.
- Ingestion points: Files like
SKILL.mdare read from thenurec-skillsclone as described inreferences/upstream-fetch.md. - Boundary markers: No explicit boundary markers are defined for the read content within the router itself.
- Capability inventory: The skill execution environment includes
git,docker, andsudocapabilities for administrative tasks. - Sanitization: Content is read directly via the shell without additional filtering, but the source is limited to official, vendor-controlled repositories.
Audit Metadata