tao-run-on-brev
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages authentication for Brev, NGC, and AWS S3 using environment variables such as
BREV_API_TOKEN,NGC_KEY,ACCESS_KEY, andSECRET_KEY. This follows best practices for secret management by avoiding hardcoded credentials and using platform-provided environment variables. - [SAFE]: Remote command execution is performed via the official
brevCLI. The instructions provide robust patterns for managing the instance lifecycle, including a readiness-wait loop that ensures the remote environment is fully provisioned and stable before commands are executed. - [SAFE]: Dependency management for the
nvidia-tao-sdkis handled through a local version resolution script to fetch pinned versions from public registries, which helps maintain environment integrity and reduces the risk of supply chain issues. - [SAFE]: The skill's external references are restricted to official NVIDIA documentation, the well-known Brev service repository on GitHub, and public package registries, all of which are appropriate for the skill's stated purpose.
Audit Metadata