tao-analyze-gaps-od-map
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to execute
docker runwith specialized configurations, including--gpus,--shm-size=8g, and--network=host. These flags are required to run the NVIDIA TAO Data Services container for object detection analysis.\n- [PRIVILEGE_ESCALATION]: Documentation recommends against mapping the current user's UID via the--userflag, as the TAO container requires a root environment for certain startup tasks (e.g.,getpass.getuser()). This results in processes running with root privileges inside the container.\n- [COMMAND_EXECUTION]: A troubleshooting workflow involves running analpineDocker container to perform a recursivechownon host-mounted directories. This is a standard procedure to restore ownership of files created by the root-privileged container.\n- [SAFE]: The container imagenvcr.io/nvidia/tao/tao-toolkit:7.2.0-data-servicesis hosted on the official NVIDIA container registry and is a trusted resource for this skill's use case.\n- [EXTERNAL_DOWNLOADS]: The skill pulls the specialized TAO toolkit image from NVIDIA's official container registry atnvcr.io.\n- [SAFE]: Thescripts/verify_object_detection_spec.pyhelper script follows security best practices by usingyaml.safe_load()for parsing configuration data.\n- [INDIRECT_PROMPT_INJECTION]:\n - Ingestion points: Annotation directories and JSON files defined in the YAML configuration paths
ground_truth_ann_pathandinference_ann_path.\n - Boundary markers: Input paths are provided in a structured YAML configuration, but the skill does not use explicit delimiters or instructions to ignore potential instructions embedded within the datasets.\n
- Capability inventory: Access to
dockerandbashtools for container execution and ownership management.\n - Sanitization: The
scripts/verify_object_detection_spec.pyscript validates the configuration schema but does not perform sanitization on the dataset contents.
Audit Metadata