nv-generate-vae-finetune
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a medical imaging training workflow using standard open-source libraries (MONAI, PyTorch) and trusted upstream repositories from NVIDIA.
- [SAFE]: The AST-detected
eval()call inscripts/run_vae_finetune.pyis a false positive. It is a call to the PyTorchtorch.nn.Module.eval()method, which is standard procedure for setting a model to evaluation mode, rather than the dangerous Python built-ineval()function. - [SAFE]: Subprocess calls in
scripts/run_vae_finetune.pyare used exclusively for retrieving git metadata (git rev-parse HEAD) and are invoked safely using a list of arguments without shell execution (shell=Trueis not used). - [SAFE]: External network operations and downloads are directed to well-known and reputable services, including GitHub (NVIDIA-Medtech organization), Hugging Face, and the official PyTorch download servers. These are documented in the skill manifest and are necessary for fetching model weights and dependencies.
- [SAFE]: Data handling is restricted to user-provided medical imaging datalists and directories. The skill provides clear disclaimers regarding its intended use for research purposes and its unsuitability for clinical or production data validation.
Audit Metadata