Security audit
Security checks across malware telemetry and agentic risk
The skill mostly matches its GPU container setup purpose, but it tells the agent to permanently rewrite its own trusted image-source guidance based on web-discovered container registries.
Install only if you are comfortable supervising Docker pulls and GPU/data mounts. Use explicit trusted image names or known vendor registries when possible, and do not allow the skill to edit its own reference files based on web search without reviewing and approving the change.
If test fails, try next source. If all fail, ask user for image. #### Step 4.5: Update Skill (self-improvement) **IMPORTANT**: If image found via Web Search (Step 4.3) passes all tests, update `references/image-sources.md` to add the newly discovered vendor hub as a primary source. This makes future lookups faster.
3. Query available tags 4. Select and pull image ### IMPORTANT: Update Skill After Success If web search finds a working image that passes all tests (pull + PyTorch import + GPU detection), **you MUST update this file** to add the newly discovered registry as a primary vendor hub.
│ ↓ fail → Step 3 │ ├─────────────────────────────────────────────────────────────────┤ │ Step 3: Web Search for vendor registry │ │ ↓ success → use image → UPDATE SKILL with new hub │ │ ↓ fail → Step 4 │ ├─────────────────────────────────────────────────────────────────┤ │ Step 4: Check local images, test PyTorch │
VirusTotal findings are pending for this skill version.
No suspicious patterns detected.
