·
Last changedVersion:
This version passed the hardening gate. Hardening applied 4 targeted changes and preserved all other text. Classified findings before hardening: 9. Classified findings closed: 0. Classified findings remaining: 9. Unclassified scanner findings remaining: 0. Review findings closed: 3. Review findings remaining: 13.
6
3
6
3
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
references/verification_examples.md | Sensitive Data & Secret Exposure | Data exfiltration | Medium | Open | |
references/verification_examples.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
benchmark/evals.json | Supply Chain & Install-Time Trust | — | Medium | Open | |
SKILL.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
evals/evals.json | Supply Chain & Install-Time Trust | — | Medium | Open | |
BENCHMARK.md | Sensitive Data & Secret Exposure | Agent snooping | Medium | Open | |
SKILL.md | Malicious Code & Command Execution | — | Low | Open | |
SKILL.md | Supply Chain & Install-Time Trust | Install-time download and execute | Low | Open |
9 findings
Install cuOpt to use it from Python, C, or as a REST server. For building cuOpt from source to contribute or modify it, see cuopt-developer.
cuopt-cu12 / libcuopt-cu12 with CUDA 12).cuopt-cuXX (Python) depends on libcuopt-cuXX (C), so installing the Python package also installs the C library and headers. Installing libcuopt-cuXX on its own does not install the Python API.Ask these if not already clear:
nvcc --version or nvidia-smi.Choose one — do not run both. The second install would override the first and can cause CUDA / package mismatch.
The C API ships in libcuopt-cuXX, which is also pulled in as a dependency of cuopt-cuXX — so if you already installed the Python package, the C library and headers are already present. Install libcuopt standalone only when you want the C API without Python. Choose one of pip or conda — do not run both.
See references/verification_examples.md
for the canonical C-API header/library find commands (conda and pip/venv variants).
No module named 'cuopt' → check pip list | grep cuopt, which python, reinstall with the correct extra-index-url.nvidia-smi and nvcc --version; ensure the package CUDA suffix (cu12 vs cu13) matches the installed CUDA.cuopt-cuXX pulls in libcuopt-cuXX as a transitive dependency, so the C library (libcuopt.so) and headers (cuopt_c.h) are already available after installing the Python package. The reverse is not true: libcuopt-cuXX alone does not install the Python bindings.cuopt-developer — build cuOpt from source and contribute to the codebase.Get started with chainctlchainctl skill install public/nvidia/cuopt-install:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.chainreg.biz/public/github.com/nvidia/skills/cuopt-install:latest
Apache-2.0
BENCHMARK.md
HARDENING.md
SKILL.md
benchmark/evals.json
evals/evals.json
references/verification_examples.md
skill-card.md
skill.oms.sig