·
Last changedVersion:
This version passed the hardening gate. Hardening applied 3 targeted changes and preserved all other text. Classified findings before hardening: 2. Classified findings closed: 0. Classified findings remaining: 2. Unclassified scanner findings remaining: 0. Review findings closed: 9. Review findings remaining: 9.
2
2
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
references/repo-map.md | Malicious Code & Command Execution | Command injection | Low | Open | |
SKILL.md | Malicious Code & Command Execution | Command injection | Low | Open |
2 findings
Orient the user from live repository facts, then hand execution to the narrowest stage skill.
DESIGN.md.Treat this resolver as part of the skill contract: a hosted copy may run outside the base repository, so never assume the current checkout contains workflows/i4h_workflows. When I4H_WORKFLOWS is unset, derive the fallback directory from that URL; set I4H_WORKFLOWS only to reuse or choose a specific destination. Never replace an existing checkout.
Read ./DESIGN.md for architecture and skills/i4h-workflow/references/repo-map.md for ownership. Discover current support instead of copying a static table:
If discovery fails because setup is incomplete, report that limitation and route to i4h-workflow-setup.
Keep the summary precise:
ctx.scene, writes ctx.act, and never advances the simulator.TaskGraph builders, and owns goal semantics. A run mode answers how that workflow should run; code and CLI use the shorter term mode.SimulationRunner alone resets, steps, renders, records, retries whole episodes, and prints run summaries.SimulationRunner validation path.Do not describe retired environment YAMLs, per-mode runners, or separate policy/Arena launchers.
| Goal | Skill |
|---|---|
Install, sync, or repair dependencies |
|
Create a new workflow/environment |
|
Edit an existing scene, camera, task, or success rule |
|
Record demonstrations |
|
Replay HDF5 |
|
Augment HDF5 |
|
Grade/filter HDF5 with a VLM |
|
Convert HDF5 to LeRobot |
|
Inspect LeRobot in a browser |
|
Fine-tune a manifest-backed policy task |
|
RL post-train a supported policy in simulation |
|
Run policy or rule-based rollouts |
|
Run the maintained complete pipeline |
|
For Stop all, do not load a stage skill. Run ./stop.sh all from the repository root and report the stopped process count.
If discovery fails, verify the resolved checkout and run setup. If a mode is absent, report it as unsupported.
Require a readable base checkout.
This router does not install, author, simulate, process data, train, or evaluate.
What does the i4h workflow include, and where should I start? → inspect live support, summarize DESIGN.md, and recommend one stage skill.Answer with the live workflow/mode list, a short architecture summary, and one concrete next skill. If the requested workflow or mode is absent from run.sh list, say it is unsupported instead of inventing a command.
Get started with chainctlchainctl skill install public/nvidia/i4h-workflow:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.chainreg.biz/public/github.com/nvidia/skills/i4h-workflow:latest
Apache-2.0
BENCHMARK.md
HARDENING.md
SKILL.md
evals/evals.json
references/repo-map.md
skill-card.md
skill.oms.sig