perf-nsight-compute-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous examples of using the
ncu(Nsight Compute) CLI to profile CUDA kernels. These commands use standard flags for filtering (--kernel-name), skipping launches (--launch-skip), and selecting specific analysis sections (--section). This is the primary function of the skill and aligns with its stated purpose. - [PRIVILEGE_ESCALATION]: The documentation explicitly mentions that
ncumay requiresudo,CAP_SYS_ADMIN, or--privilegedmode in containers to access GPU performance counters. This is a legitimate requirement for hardware-level profiling tools and is documented for transparency. - [EXTERNAL_DOWNLOADS]: The skill contains links to official NVIDIA documentation and troubleshooting guides on
developer.nvidia.comanddocs.nvidia.com. These are trusted vendor sources used for providing additional technical context to the user. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data in the form of
ncucommand output and.ncu-repreport files. It mitigates potential risks by instructing the agent to 'Quote before you interpret,' requiring raw metrics to be shown before any analysis is provided. It also utilizes the officialncu_reportPython API for programmatic analysis, which is a standard and safe practice for this domain. - Ingestion points: Shell output from
ncucommands and binary/compressed report files (.ncu-rep,.ncu-repz). - Boundary markers: Explicit instructions to present raw ncu command output and metric values before interpretation.
- Capability inventory: Shell command execution (
ncu) and Python code execution (for report analysis scripts). - Sanitization: Relies on the official
ncu_reportlibrary for structured data extraction and emphasizes manual verification of raw data. - [SAFE]: The skill author (NVIDIA) and the resources referenced (official domains and packages) are consistent. The instructions focus on performance analysis and optimization without requesting unnecessary permissions or performing suspicious background operations.
Audit Metadata