nemo-retriever
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installation process described in
references/install.mddownloads the NeMo Retriever Library from the official NVIDIA GitHub repository and fetches PyTorch wheels from the official PyTorch wheel index.- [COMMAND_EXECUTION]: Thescripts/filename_fast_path.pyscript utilizessubprocess.runto execute the localretrievercommand-line tool for PDF processing, whileSKILL.mdand reference guides provide instructions for runningretriever queryandretriever ingestcommands.- [PRIVILEGE_ESCALATION]: Setup and installation instructions inreferences/install.mdandreferences/setup.mdinclude the use ofsudofor installing host dependencies likelibreofficeandffmpeg.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted multimodal document collections (PDF, DOCX, images, audio, video) to support question-answering, which presents an indirect prompt injection surface where malicious instructions within the documents could attempt to manipulate the agent's synthesized responses. - Ingestion points: Document data enters the context via the
retriever ingestandretriever querycommands as outlined inSKILL.mdandreferences/setup.md. - Boundary markers: The instructions in
references/query.mdlack specific delimiters or instructions for the agent to disregard instructions embedded within retrieved text chunks. - Capability inventory: The skill environment allows for shell command execution, Python script execution, and local file access.
- Sanitization: There are no documented content sanitization or validation steps for the text retrieved from external documents.
Audit Metadata