trt-strong-typing-migration
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/migrate.pytool usesast.NodeTransformerto rewrite Python code. This is an expected and documented functionality for a code migration skill. It operates locally on user-provided file paths. - [COMMAND_EXECUTION]: The
scripts/verify.shscript executes shell commands to create a temporary test file and run the Python migrator against it to ensure correctness. It usesmktempfor a safe workspace and contains standard assertion logic. - [EXTERNAL_DOWNLOADS]: The skill mentions external dependencies such as
nvidia-modelopt,onnx, andonnxruntime. These are official packages from well-known sources (NVIDIA and Microsoft-led ONNX community) required for the primary purpose of the skill. - [REMOTE_CODE_EXECUTION]: The skill documents how to run ModelOpt commands (
python -m modelopt.onnx.autocast). These are legitimate vendor tools from NVIDIA used for model optimization and do not fetch code from untrusted remote servers.
Audit Metadata