tao-train-segformer
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied datasets, which creates a potential surface for indirect prompt injection.
- Ingestion points: Data enters the system via the
dataset.segment.root_diranddataset.segment.quant_calibration_dataset.images_dirpaths specified inreferences/skill_info.yaml. - Boundary markers: The prompt instructions do not specify explicit delimiters or boundary markers for external data content.
- Capability inventory: The skill uses the
bashtool to executesegformerCLI commands anddocker runas documented inSKILL.mdandreferences/tao-deploy-segformer.md. - Sanitization: Input validation and data handling are managed by the underlying TAO Toolkit CLI and container environment.
- [EXTERNAL_DOWNLOADS]: The skill references official NVIDIA container images to perform model lifecycle tasks.
- Evidence:
references/skill_info.yamlandreferences/tao-deploy-segformer.mdreferencenvcr.io/nvidia/tao/tao-toolkitimages for training and deployment. - [COMMAND_EXECUTION]: The skill provides examples and instructions for running
dockerandsegformerCLI tools to execute model training and optimization. - Evidence: Command templates are provided in
references/skill_info.yamlandreferences/tao-deploy-segformer.md. - [SAFE]: No malicious patterns, hardcoded secrets, or unauthorized persistence mechanisms were identified.
Audit Metadata