·
Last changedVersion:
This version passed the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 46. Classified findings closed: 0. Classified findings remaining: 46. Unclassified scanner findings remaining: 0. Review findings closed: 1. Review findings remaining: 13.
25
21
25
21
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Privilege Escalation & Host / Cloud Compromise | Privilege escalation | Medium | Open | |
references/asr-custom.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
references/tts.md | Sensitive Data & Secret Exposure | Data exfiltration | Medium | Open | |
references/tts-custom.md | Privilege Escalation & Host / Cloud Compromise | Privilege escalation | Medium | Open | |
references/asr-custom.md | Privilege Escalation & Host / Cloud Compromise | Privilege escalation | Medium | Open | |
references/nmt.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
references/tts.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
references/model-selection.md | Supply Chain & Install-Time Trust | — | Medium | Open |
46 findings
Single entry point for all NVIDIA Nemotron Speech (Riva) NIM workflows: ASR (speech-to-text), TTS (text-to-speech), and NMT (translation). Covers cloud-hosted inference via build.nvidia.com, self-hosted Docker deployment, client-protocol choice for ASR (gRPC, HTTP, WebSocket), custom NeMo model deployment via riva-build, ASR pipeline tuning (VAD, diarization, language models), and the prerequisite Docker / NGC / driver setup.
Use this skill for any Nemotron Speech / Riva NIM task — deployment, testing, custom model build, system requirements check, or model selection across ASR / TTS / NMT modalities.
Identify the user's task type, then load the corresponding reference file from references/. The reference files contain the detailed per-workflow content; this SKILL.md is a routing surface. Load only the reference relevant to the task at hand.
references/setup.md.pip install -U nvidia-riva-client and a valid NVIDIA_API_KEY from https://build.nvidia.com.NVIDIA_API_KEY and NGC_API_KEY as secrets: never print, paste, commit, or log real key values. Prefer --password-stdin for Docker login and store persistent keys in a credential manager or a chmod 600 env file rather than world-readable shell startup files./opt/nim/.cache must be writable by the container user (the NIM container runs as nvs:1000 internally), not just the host user. Run sudo chown 1000:1000 $LOCAL_NIM_CACHE after creating the directory so the container can write to it. Avoid world-writable modes — they let any local user replace cached model artifacts. Also avoid -u "$(id -u):$(id -g)" on the docker run — /opt/nim/workspace inside the container isn't writable to arbitrary UIDs. If you see I/O error Permission denied (os error 13) during model download, the host directory ownership is the issue.references/setup.md.references/deployment-readiness-checks.md.references/model-selection.md.references/asr.md..nemo → RMIR → NIM) to references/asr-custom.md.references/pipelines.md.references/tts.md..nemo → RMIR → NIM) to references/tts-custom.md.custom_configuration keys — to references/tts-pipelines.md. (For discovering and constructing the pronunciation itself, use tts-pronunciation.md.)references/tts-pronunciation.md.references/nmt.md.For per-release detail — current model catalog, container IDs, function IDs, voice lists, VRAM minimums, per-model feature support — fetch or open the canonical NVIDIA doc rather than relying on text in this SKILL.md or the references. Each reference file includes its own routing table to the relevant doc pages.
Top-level landing pages:
"Deploy a Parakeet ASR NIM" → load references/asr.md, follow Option B (self-hosted), Steps 1–4.
"Synthesize speech with Magpie" → load references/tts.md, follow Option A (cloud) or Option B (self-hosted).
"Translate English to German" → load references/nmt.md, follow the 4-step flow.
"Convert my fine-tuned .nemo to a NIM" → load references/asr-custom.md for the 4-phase pipeline and references/pipelines.md for build-time config.
"Deploy a custom fine-tuned TTS voice as a NIM" → load references/tts-custom.md for the 4-phase pipeline.
"Use zero-shot voice cloning with Magpie" → load references/tts-pipelines.md.
"Add SSML emphasis tags to my TTS request" → load references/tts-pipelines.md.
"'NVIDIA' sounds wrong in my Magpie TTS output — suggest a few IPA options to test" → load references/tts-pronunciation.md, generate IPA candidates, synthesize variants, then output all three delivery formats.
"How do I fix the pronunciation of 'NIM' in Riva TTS with a custom_dictionary in gRPC Python?" → load references/tts-pronunciation.md, propose IPA for 'NIM', show wire format and gRPC snippet.
"Can my GPU run this?" → load references/deployment-readiness-checks.md and run the 6-step system check.
"Which Riva model should I use?" → load references/model-selection.md, apply the decision framework, then fetch the support matrix for the specific current model name.
riva-build, riva-deploy, riva_streaming_asr_client), Python client (riva.client), gRPC namespace (nvidia.riva.asr.*), container registry (nvcr.io/nim/nvidia/*), and all NVIDIA documentation URLs still use "Riva". Do not rename these in code, commands, or docs.For task-specific runtime or modality issues, use the relevant reference file (references/<task>.md). Cross-cutting readiness checks:
references/deployment-readiness-checks.md (system check + health check table)references/deployment-readiness-checks.mddocker pull from nvcr.io returns 403 → references/setup.md (Step 5 — Docker login)references/asr-custom.md (Phase 2 base image)references/deployment-readiness-checks.md, then verify on the support matrixreferences/setup.md)NVIDIA_API_KEY and internet accessriva.client), gRPC services (nvidia.riva.*), and NVIDIA documentation URLs still use "Riva" — follow official docs and catalogs for naming, do not rename these in commands or codereferences/deployment-readiness-checks.mdreferences/setup.mdreferences/model-selection.mdreferences/asr.md, references/tts.md, or references/nmt.mdGet started with chainctlchainctl skill install public/nvidia/nemotron-speech:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/nvidia/skills/nemotron-speech:latest
Apache-2.0
BENCHMARK.md
HARDENING.md
SKILL.md
evals/EVAL.md
evals/evals.json
references/asr-custom.md
references/asr.md
references/deployment-readiness-checks.md
references/model-selection.md
references/nmt.md
references/pipelines.md
references/setup.md
references/tts-custom.md
references/tts-pipelines.md
references/tts-pronunciation.md
references/tts.md
scripts/main.py
skill-card.md
skill.oms.sig