ascend-npu-driver-install
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
install_npu_driver.shexecutes high-privilege system commands includinggroupaddanduseraddto create service accounts, andrebootto apply driver changes. These operations are restricted to the ROOT user and are consistent with the skill's deployment purpose. - [COMMAND_EXECUTION]: The installation process involves executing
.runbinary packages found in a user-provided directory. The skill mitigates risks by using a Python validation script (check_package.py) that applies strict regular expression matching to ensure filenames follow the official Ascend naming convention before granting execution permissions and running them. - [EXTERNAL_DOWNLOADS]: The script uses native system package managers (
aptoryum) to download and install standard development dependencies such asgcc,make, anddkmsfrom official OS repositories.
Audit Metadata