tao-run-on-kubernetes
Warn
Audited by Snyk on Jul 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The SKILL.md setup instructions instruct running "helm repo add nvidia https://helm.ngc.nvidia.com/nvidia" and "helm install ... nvidia/gpu-operator", which fetch and execute remote Helm chart code from https://helm.ngc.nvidia.com/nvidia as part of installing the required NVIDIA GPU Operator for self-managed clusters.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill includes explicit instructions to run a node-level GPU host installer (which modifies host runtime and likely requires sudo) and to install cluster components (helm install / kubectl secret creation), i.e., it directs modifying the machine/cluster state.
Issues (2)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata