tao-run-on-kubernetes

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill submits Kubernetes Jobs that pull and run container images from an external registry (e.g., nvcr.io/nvidia/tao/tao-toolkit:6.26.3-pyt), so at job runtime code from https://nvcr.io (nvcr.io/nvidia/tao/tao-toolkit:6.26.3-pyt) is fetched and executed in the cluster.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs running an installer that modifies GPU host runtime on nodes (the setup-nvidia-gpu-host.sh --install step) and to install cluster components (helm install gpu-operator, kubectl create secret), actions that modify system/cluster state and likely require elevated privileges, so it pushes the agent toward changing the machine/cluster state.