tao-run-on-local-docker
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides various shell commands for verifying the Docker environment and GPU runtime. These include
docker run,docker network create, and scripts for setting up the NVIDIA GPU host. All commands are standard for Docker and GPU management tasks. - [EXTERNAL_DOWNLOADS]: The skill includes instructions to install the TAO SDK using
pip install 'nvidia-tao-sdk[docker]'. This is a standard installation procedure for a well-known package from a trusted vendor. It also references scripts and helpers (e.g.,resolve_versions_key.py,check_tao_launch_preflight.py) located in a path defined byTAO_SKILL_BANK_PATH, which is expected for this developer-oriented skill. - [CREDENTIALS_UNSAFE]: The skill documents the use of various environment variables for authentication and configuration, such as
NGC_KEY,ACCESS_KEY,SECRET_KEY, andHF_TOKEN. These are handled as environment variables rather than being hardcoded, which aligns with security best practices for credential management in automated workflows.
Audit Metadata