spark-environment-setup
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references container images from NVIDIA's official NGC registry (
nvcr.io) and Python wheels from established repositories likedownload.pytorch.organdwheels.vllm.ai. These are well-known and trusted infrastructure providers for the machine learning community. - [COMMAND_EXECUTION]: Instructions include standard shell commands for
pipanddocker. Thepipcommands utilize explicit version pinning and the--no-depsflag to prevent the resolution of incompatible or untrusted dependency trees. Thedockercommands use standard flags for GPU acceleration and memory management appropriate for the described hardware. - [DATA_EXFILTRATION]: No patterns of sensitive data access or exfiltration were detected. Network activities are restricted to software acquisition from established registries.
- [PROMPT_INJECTION]: The skill contains technical documentation and instructions without any attempts to override model behavior, extract system prompts, or bypass safety filters.
- [SAFE]: The skill follows security best practices for environment setup, such as recommending the use of pinned digests for Docker images to ensure reproducibility and supply chain integrity.
Audit Metadata