cdf-orchestration-preflight

72 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.

By NVIDIA/skills (GitHub) · coding · 3,933 stars · scanned at commit 2630133

Set up missing Linux prerequisites and audit whether a Cosmos Data Factory (CDF) Orchestration checkout and its Kubernetes or OSMO environment are ready to install the controller and run every packaged DAG. Use for prerequisite, pre-setup, Kubernetes, GPU, RWX/NFS, credential, controller-readiness, and quick-start checks. Not for deploying the controller (use cdf-orchestration-setup, which calls this audit first), authoring payloads, or running workflows.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.

Found in 12 places.

skills/cdf-orchestration-preflight/SKILL.md, line 46python3 skills/cdf-orchestration-preflight/scripts/preflight.py audit \
skills/cdf-orchestration-preflight/SKILL.md, line 125python3 skills/cdf-orchestration-preflight/scripts/storage_check.py --payload <payload.json>
skills/cdf-orchestration-preflight/SKILL.md, line 160cp secrets.env.example secrets.env # only when secrets.env does not already exist

Show 9 more

skills/cdf-orchestration-preflight/scripts/preflight.py, line 162completed = subprocess.run(
skills/cdf-orchestration-preflight/scripts/preflight.py, line 169except (OSError, subprocess.TimeoutExpired) as exc:
skills/cdf-orchestration-preflight/scripts/storage_check.py, line 67result = subprocess.run( # noqa: S603 # nosec B603
skills/cdf-orchestration-preflight/scripts/storage_check.py, line 72except subprocess.TimeoutExpired:
skills/cdf-orchestration-preflight/tests/test_preflight.py, line 827result = subprocess.run(
skills/cdf-orchestration-preflight/tests/test_storage_check.py, line 161completed = subprocess.CompletedProcess([], 0, stdout=encoded, stderr="")
skills/cdf-orchestration-preflight/tests/test_storage_check.py, line 168completed = subprocess.CompletedProcess([], 0, stdout="", stderr="")
skills/cdf-orchestration-preflight/tests/test_storage_check.py, line 175def run_cli(self, payload: dict, config: dict) -> subprocess.CompletedProcess:
skills/cdf-orchestration-preflight/tests/test_storage_check.py, line 181return subprocess.run(

Changes files outside its own folder

The author does not mention this.

Found in 3 places.

skills/cdf-orchestration-preflight/config/skillspector-baseline.yaml, line 25reason: "Reviewed fixed printf-to-sudo-tee command writes only net.ipv4.ip_forward=1 to /etc/sysctl.d/99-cdf-kubernetes.conf during approved bootstrap. It does
skills/cdf-orchestration-preflight/references/bootstrap.md, line 113printf 'net.ipv4.ip_forward = 1\n' | sudo tee /etc/sysctl.d/99-cdf-kubernetes.conf >/dev/null
skills/cdf-orchestration-preflight/references/bootstrap.md, line 130mkdir -p "$HOME/.kube"

Reads your saved credentials, such as SSH keys or .env files

This is disclosed by the author in the skill's SKILL.md or README.

Found in 4 places.

skills/cdf-orchestration-preflight/config/skillspector-baseline.yaml, line 38message: "*~/.kube/config*"
skills/cdf-orchestration-preflight/config/skillspector-baseline.yaml, line 39reason: "False positive: instructs the agent explicitly not to fall back silently to the default ~/.kube/config path; not a credential read."
skills/cdf-orchestration-preflight/evals/evals.json, line 17"ground_truth": "KUBECONFIG is unset, so ask for the absolute kubeconfig path instead of falling back to ~/.kube/config. Local tool, repository, and credential

Show 1 more

skills/cdf-orchestration-preflight/evals/evals.json, line 20"Does not silently use ~/.kube/config.",

Connects to the internet

The author does not mention this.

Found in 3 places.

skills/cdf-orchestration-preflight/scripts/preflight.py, line 17import urllib.request
skills/cdf-orchestration-preflight/scripts/preflight.py, line 1478request = urllib.request.Request(
skills/cdf-orchestration-preflight/scripts/preflight.py, line 1483with urllib.request.urlopen(request, timeout=15) as response: # nosec B310

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'cdf-orchestration-preflight' ] || [ -L ~/.agents/skills/'cdf-orchestration-preflight' ]; then echo 'A skill folder named cdf-orchestration-preflight already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/NVIDIA/skills' "$d" && git -C "$d" checkout --quiet '2630133f22e357f2005886567a39eddcc1b520e2' -- 'skills/cdf-orchestration-preflight' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/cdf-orchestration-preflight' ~/.agents/skills/'cdf-orchestration-preflight' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'cdf-orchestration-preflight' ~/.claude/skills/'cdf-orchestration-preflight' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for NVIDIA/skills shows the score of its lowest-scoring skill.

SkillTrust badge for NVIDIA/skills

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/NVIDIA/skills.svg)](https://zalavijaysinh.github.io/skilltrust/repos/NVIDIA/skills/)

Score history

Date	Version	Score
2026-11-11	`2630133`	72
2026-11-08	`fce3cca`	72
2026-11-07	`fce3cca`	72