tao-run-on-kubernetes

Warn

Audited by Snyk on Jul 17, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The SKILL.md setup instructions instruct running "helm repo add nvidia https://helm.ngc.nvidia.com/nvidia" and "helm install ... nvidia/gpu-operator", which fetch and execute remote Helm chart code from https://helm.ngc.nvidia.com/nvidia as part of installing the required NVIDIA GPU Operator for self-managed clusters.

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill includes explicit instructions to run a node-level GPU host installer (which modifies host runtime and likely requires sudo) and to install cluster components (helm install / kubectl secret creation), i.e., it directs modifying the machine/cluster state.

Issues (2)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 17, 2026, 08:01 PM
Issues
2
Security Audit — snyk — tao-run-on-kubernetes