Skills
skills/nvidia/skills/tao-finetune-cosmos-reason/Gen Agent Trust Hub

tao-finetune-cosmos-reason

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The conversion utility scripts/prepare_cosmos3_vlm_checkpoint.py uses subprocess.run to execute git and docker commands for environment setup and model processing.
  • [COMMAND_EXECUTION]: Action metadata in references/skill_info.yaml defines execution logic for inference and quantize actions using Python's subprocess module to invoke specialized CLI tools. The quantize action also performs runtime monkey-patching of the compressed_tensors library to provide a compatibility shim.
  • [EXTERNAL_DOWNLOADS]: The skill downloads the Cosmos framework from NVIDIA's official GitHub repository to perform necessary model conversions.
  • [CREDENTIALS_UNSAFE]: The documentation references the requirement for an HF_TOKEN to access gated models; it correctly instructs users to provide this via environment variables rather than hardcoding it into the skill files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 10:58 AM