Skills
skills/nvidia/skills/vss-manage-alerts/Gen Agent Trust Hub

vss-manage-alerts

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches required Python packages from the official Python Package Index (PyPI) at runtime.
  • Evidence: The skill executes pip install targeting a local directory for packages listed in scripts/alert-notify/requirements.txt.
  • [COMMAND_EXECUTION]: The skill executes shell commands to manage alert services, probe service status, and launch a background notification server.
  • Evidence: instructions in SKILL.md and references/alert-notify.md use curl, docker ps, and nohup python3 server.py to operate the pipeline.
  • [DATA_EXFILTRATION]: The skill retrieves configuration data from local files and environment variables to facilitate its core purpose of relaying alert notifications.
  • Evidence: The notification server reads ~/.openclaw/openclaw.json and environment variables to obtain Slack tokens and dashboard connection details.
  • [CREDENTIALS_UNSAFE]: The instructions correctly guide the user to manage sensitive credentials like SLACK_BOT_TOKEN and NGC_CLI_API_KEY through environment variables rather than hardcoding them.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 05:12 PM
Security Audit — agent-trust-hub — vss-manage-alerts