tao-mine-nearest-neighbors
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to execute shell commands including
docker runfor the primary mining task,nvidia-smifor hardware verification, and local Python scripts (prepare_nearest_neighbors_spec.py,verify_nearest_neighbors_spec.py) for configuration management. - [EXTERNAL_DOWNLOADS]: The skill pulls an official TAO Data Services container image from NVIDIA's container registry (
nvcr.io). This is a legitimate vendor resource necessary for the skill's core functionality. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from parquet embedding files and YAML configuration specs which could potentially contain malicious content if sourced from an attacker.
- Ingestion points:
source_parquetandtarget_parquetfiles, and thenearest_neighbors.yamlspec file. - Boundary markers: The skill does not use specific delimiters but processes data through structured libraries.
- Capability inventory: Includes the ability to write result files and execute Docker commands.
- Sanitization: The provided Python scripts use
yaml.safe_load()to parse configuration files securely.
- Ingestion points:
- [PRIVILEGE_ESCALATION]: The skill utilizes high-privilege Docker execution parameters, including
--network=host,--gpus, and host-to-container volume mounting (-v). These flags are required for high-performance GPU-accelerated data processing and are standard practice for this specific toolset.
Audit Metadata