·
Last changedVersion:
This version passed the hardening gate. Hardening applied 1 targeted change, normalized allowed-tools to the canonical single-string form, and preserved all other text. Classified findings before hardening: 2. Classified findings closed: 1. Classified findings remaining: 1. Unclassified scanner findings remaining: 0. Review findings closed: 3. Review findings remaining: 22.
1
1
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
evals/evals.json | Excessive Agency & Rogue Autonomy | — | Medium | Open | |
SKILL.md | Prompt Injection | Indirect prompt injection | Low | Closed |
2 findings
Standard supervised fine-tuning: train a model on a labeled dataset, optionally evaluate, then optionally export. The most common TAO workflow for adapting a pretrained model to a new dataset.
automl_enabled: true and automl_policy is on; set
automl_policy=off for a plain single training runeval_dataset_uri is resolvedThe selected model skill's resolved container_image is the default training
runtime. Do not replace it with a host venv, uv environment, generic training
image, or hand-written trainer unless the user explicitly requests that
execution mode. SDK/controller Python environments are control-plane-only; the
model action remains container-backed.
s3://bucket/train/)${TAO_SKILL_BANK_PATH:-~/tao-skills-external}/scripts/list_tao_platforms.py --format textimage=<override> before creating runner files or submitting training.on by default; set off to bypass model-level AutoML for this run while leaving model metadata unchanged. Use only on / off in new launch settings.image=<override> to pin a specific TAO toolkit build
after reviewing the resolved default.After the user confirms they want this standard train/eval/export workflow,
ask which supported platform they intend to run on. Generate the choices with
scripts/list_tao_platforms.py --format text; do not scan platform docs or
folders.
Before creating a plain train runner, inspect the selected model's metadata
with scripts/list_tao_models.py --scope automl --format json or read
skills/models/<network>/references/skill_info.yaml. If automl_enabled is true and
the helper reports a valid train schema for that model, route the train stage
through skills/applications/tao-run-automl by default. Only stay on the plain train path
when automl_policy=off, the user explicitly asks for no HPO/AutoML, or AutoML
is enabled but not runnable because the model's train schema is not packaged
yet.
Also ask whether long-running monitoring should stay enabled and how many minutes between status updates. Defaults: enabled, 5 minutes.
After the model/action are known, run scripts/resolve_tao_image.py --model <network> --action train --format text and ask whether to use the resolved
image or an image=<override>. Do not create the tao-train-single-step runner until the
image is confirmed.
After platform selection, run
scripts/list_tao_platforms.py --platform <platform> --format text and ask
only for credentials relevant to that platform, plus any selected-model
credentials. Do not ask for unrelated platform credentials.
Get started with chainctlchainctl skill install public/nvidia/tao-train-single-step:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/nvidia/skills/tao-train-single-step:latest
Apache-2.0
BENCHMARK.md
HARDENING.md
SKILL.md
evals/evals.json
references/skill_info.yaml
skill-card.md
skill.oms.sig