tao-setup
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEPERSISTENCEEXTERNAL_DOWNLOADS
Full Analysis
- [PERSISTENCE]: The
scripts/install-codex-agents.shscript copies the TAO agent identity file to~/.codex/AGENTS.md. This ensures the TAO identity is loaded automatically in every Codex session. - [EXTERNAL_DOWNLOADS]: The setup script registers the official NVIDIA TAO skill bank marketplace and installs the associated plugin from the vendor's GitHub repository (
https://github.com/NVIDIA-TAO/tao-skill-bank.git). - [DATA_EXPOSURE]: The skill performs presence checks for sensitive environment variables (such as
NGC_KEY,HF_TOKEN, and S3 credentials). It explicitly adheres to a 'names only' policy, ensuring that secret values are never printed to the logs or output.
Audit Metadata