vss-setup-behavior-analytics
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard deployment procedures for the behavior-analytics service using Docker Compose. Instructions focus on environment setup, configuration mounting, and service verification.
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading container images from the official NVIDIA Container Registry (
nvcr.io). This is a well-known and expected service for this vendor. - [CREDENTIALS_UNSAFE]: Provides guidance for using
NGC_CLI_API_KEYfor registry authentication. Importantly, it includes a security note advising users NOT to hardcode the key, write it to shell profiles, or commit it to version control, recommending secure session-based input instead. - [COMMAND_EXECUTION]: Includes routine
dockeranddocker composecommands for managing service containers. It also references a vendor-specific validation tool,nv-base, for skill evaluation. - [DATA_EXFILTRATION]: No patterns of unauthorized data collection or exfiltration were detected. Network operations are limited to interaction with well-known service brokers (Kafka, Redis, MQTT) and the official NVIDIA registry.
- [PROMPT_INJECTION]: Instructions are purely operational and do not attempt to override agent safety guidelines or system behavior.
Audit Metadata