brev-etiquette
Provides operational guidance for managing NeMo-RL agents on Brev, optimizing storage and environment secrets for research campaigns.
Install this skill
or
40/100
Security score
The brev-etiquette skill was audited on May 31, 2026 and we found 12 security issues across 2 threat categories, including 2 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 17
Template literal with variable interpolation in command context
SourceSKILL.md
| 17 | - Create a campaign root such as `/ephemeral/nemo-rl/${USER:-ubuntu}/auto-research/<campaign>` and use one subdirectory per experiment. |
medium line 40
Template literal with variable interpolation in command context
SourceSKILL.md
| 40 | ```bash |
high line 75
Template literal with variable interpolation in command context
SourceSKILL.md
| 75 | - Reuse a shared cache root such as `/ephemeral/nemo-rl/${USER:-ubuntu}/cache` across experiments unless a run explicitly requires a clean cache. |
medium line 3
Access to .env file
SourceSKILL.md
| 3 | description: Brev instance operating guidance for NeMo-RL agents working in /home/ubuntu/RL with limited workspace disk, a larger /ephemeral volume, and optional /home/ubuntu/RL/.env secrets. Use when |
medium line 22
Access to .env file
SourceSKILL.md
| 22 | - Treat `/home/ubuntu/RL/.env` as the local secret store. It may contain keys such as `WANDB_API_KEY`, `HF_TOKEN`, or `HUGGING_FACE_HUB_TOKEN`. |
medium line 23
Access to .env file
SourceSKILL.md
| 23 | - Before any run that may need external auth, load `/home/ubuntu/RL/.env` when it exists. Never print, `cat`, log, commit, or summarize secret values. |
medium line 24
Access to .env file
SourceSKILL.md
| 24 | - If `/home/ubuntu/RL/.env` is absent, or a required key is still unset after loading it, remind the user to add the needed key to that file before launching authenticated work. |
low line 27
Access to .env file
SourceSKILL.md
| 27 | if [ -f /home/ubuntu/RL/.env ]; then |
low line 29
Access to .env file
SourceSKILL.md
| 29 | . /home/ubuntu/RL/.env |
low line 32
Access to .env file
SourceSKILL.md
| 32 | echo "Missing /home/ubuntu/RL/.env; add required keys such as WANDB_API_KEY or HF_TOKEN before authenticated runs." |
low line 41
Access to .env file
SourceSKILL.md
| 41 | if [ -f /home/ubuntu/RL/.env ]; then |
low line 43
Access to .env file
SourceSKILL.md
| 43 | . /home/ubuntu/RL/.env |
Scanned on May 31, 2026
View Security Dashboard