nvidia-skill-finder
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- External Catalog Lookups: The skill is designed to fetch metadata and skill lists from official NVIDIA repositories on GitHub and the NVIDIA build portal. These are well-known, established services used for tool discovery.
- Package Management and Installation: The skill suggests using the
npx skills addcommand to install new capabilities. While this involves downloading and executing external packages, the instructions strictly mandate that the agent must seek explicit user approval before executing any installation commands, ensuring human-in-the-loop oversight. - Implicit Invocation Configuration: The skill is configured to trigger automatically when NVIDIA-related hardware or software topics are mentioned. This behavior is intended to help users find relevant tools efficiently without manual intervention, scoped specifically to the NVIDIA domain.
- Verifiable Signatures: The presence of a Sigstore bundle (
skill.oms.sig) indicates that the skill's provenance and integrity can be cryptographically verified, which is a security best practice for distributed agent capabilities.
Audit Metadata