vss-deploy-profile

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the uv package manager from its official domain astral.sh to manage Python script execution. It also retrieves the NVIDIA NGC CLI from api.ngc.nvidia.com and various perception models from ngc.nvidia.com and huggingface.co. These downloads are essential for the deployment of the VSS blueprint and target trusted vendor or well-known service domains.
  • [REMOTE_CODE_EXECUTION]: The skill facilitates the installation of the uv tool by piping a remote script to the shell (curl | sh) and installs the NGC CLI by downloading, extracting, and linking the binary to the system path. Both operations are standard for setting up the required developer environment.
  • [COMMAND_EXECUTION]: The skill executes a wide range of system configuration commands, including Docker deployment (docker compose), kernel parameter modifications (sysctl), and firewall management (ufw). The instructions include logic to detect sudo permissions and correctly handle password prompts by providing manual commands to the user if necessary.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 03:45 PM
Security Audit — agent-trust-hub — vss-deploy-profile