Skip to content

skills: add NVIDIA-signed skill cards and signatures (partial set)#1249

Merged
rgsl888prabhu merged 3 commits into
NVIDIA:mainfrom
rgsl888prabhu:add_signed_skills
May 19, 2026
Merged

skills: add NVIDIA-signed skill cards and signatures (partial set)#1249
rgsl888prabhu merged 3 commits into
NVIDIA:mainfrom
rgsl888prabhu:add_signed_skills

Conversation

@rgsl888prabhu
Copy link
Copy Markdown
Collaborator

Adds NVIDIA skill cards (skill-card.md) and detached signatures (skill.oms.sig) for the following skills:

  • cuopt-numerical-optimization-api-c
  • cuopt-numerical-optimization-api-cli
  • cuopt-routing-api-python
  • cuopt-server-api-python
  • cuopt-server-common
  • cuopt-user-rules
  • numerical-optimization-formulation
  • routing-formulation
  • skill-evolution

The following skills timed out in the evaluation pipeline and will be added in a follow-up PR:

  • cuopt-developer
  • cuopt-install
  • cuopt-numerical-optimization-api-python

@rgsl888prabhu rgsl888prabhu requested a review from a team as a code owner May 19, 2026 21:24
@rgsl888prabhu rgsl888prabhu requested a review from Iroy30 May 19, 2026 21:24
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 19, 2026

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 95c90c75-ce32-43ca-8dc8-8008ce258127

📥 Commits

Reviewing files that changed from the base of the PR and between 00ecb9a and f77bde7.

📒 Files selected for processing (1)
  • .github/workflows/pr.yaml

📝 Walkthrough

Walkthrough

Adds nine new skill-card.md documents and matching skill.oms.sig DSSE signature bundles for multiple cuOpt skills; inserts single blank lines after YAML frontmatter in several SKILL.md files; updates pre-commit hook excludes and CI changed-files exclusions.

Changes

Skill Documentation and Signature Bundles

Layer / File(s) Summary
Skill card metadata documentation
skills/cuopt-numerical-optimization-api-c/skill-card.md, skills/cuopt-numerical-optimization-api-cli/skill-card.md, skills/cuopt-routing-api-python/skill-card.md, skills/cuopt-server-api-python/skill-card.md, skills/cuopt-server-common/skill-card.md, skills/cuopt-user-rules/skill-card.md, skills/numerical-optimization-formulation/skill-card.md, skills/routing-formulation/skill-card.md, skills/skill-evolution/skill-card.md
Nine new skill-card.md files document intended use case, Apache 2.0 licensing, global deployment scope, known risks with mitigations, reference documentation links, declared output type and format, skill version 26.06.00, and ethical considerations with release reporting links.
OMS DSSE signature bundles
skills/cuopt-numerical-optimization-api-c/skill.oms.sig, skills/cuopt-numerical-optimization-api-cli/skill.oms.sig, skills/cuopt-routing-api-python/skill.oms.sig, skills/cuopt-server-api-python/skill.oms.sig, skills/cuopt-server-common/skill.oms.sig, skills/cuopt-user-rules/skill.oms.sig, skills/numerical-optimization-formulation/skill.oms.sig, skills/routing-formulation/skill.oms.sig, skills/skill-evolution/skill.oms.sig
Nine new skill.oms.sig files provide DSSE-wrapped in-toto signature bundles for artifact verification. Each bundle contains X.509 certificate chain verification material, base64-encoded in-toto payload with skill metadata and resource digests, and DSSE signature entries.
Documentation formatting
skills/cuopt-numerical-optimization-api-c/SKILL.md, skills/cuopt-numerical-optimization-api-cli/SKILL.md, skills/cuopt-routing-api-python/SKILL.md, skills/cuopt-server-api-python/SKILL.md, skills/cuopt-server-common/SKILL.md, skills/cuopt-user-rules/SKILL.md, skills/numerical-optimization-formulation/SKILL.md, skills/routing-formulation/SKILL.md, skills/skill-evolution/SKILL.md
Nine SKILL.md files receive a single blank line insertion after the YAML frontmatter closing delimiter to separate metadata from the main content header.
pre-commit hook excludes
.pre-commit-config.yaml
Adjust end-of-file-fixer and trailing-whitespace hook exclude regexes to ignore additional dataset and skills-related files and signature artifacts.
CI changed-files exclusions
.github/workflows/pr.yaml
Adds skills/**/skill-card.md and skills/**/skill.oms.sig to the changed-files exclusion lists for test_cpp, test_python_conda, and test_python_wheels groups.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

  • NVIDIA/cuopt#1205: Overlaps edits to skills/cuopt-user-rules/SKILL.md and related documentation wording.

Suggested reviewers

  • mlubin
  • Iroy30
  • tmckayus
🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and specifically summarizes the main change: adding NVIDIA-signed skill cards and signatures for a set of skills, which aligns with the changeset's primary purpose.
Description check ✅ Passed The description is directly related to the changeset, detailing which skills received skill cards and signatures, and noting which skills will be added in a follow-up PR due to evaluation pipeline timeouts.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 10

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@skills/cuopt-numerical-optimization-api-c/skill-card.md`:
- Line 40: Replace the generic link text "here" with descriptive link text that
conveys the destination and purpose (for example "report quality, risk, security
vulnerabilities or NVIDIA AI concerns on Intigriti"), updating the markdown in
skill-card.md where the sentence "Please report quality, risk, security
vulnerabilities or NVIDIA AI Concerns [here]" appears so it reads something like
"... Concerns on Intigriti" with the URL preserved; ensure the visible link text
is descriptive to satisfy accessibility/MD059.

In `@skills/cuopt-numerical-optimization-api-cli/skill-card.md`:
- Line 39: Replace the non-descriptive anchor "[here]" with a meaningful label
in the markdown link on the line that currently reads "Please report quality,
risk, security vulnerabilities or NVIDIA AI Concerns
[here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail)"; change the
anchor text to a descriptive phrase (e.g., "NVIDIA VDP submission portal" or
"Intigriti NVIDIA VDP report page") while keeping the URL unchanged so the link
is accessible and MD059 is satisfied.

In `@skills/cuopt-routing-api-python/skill-card.md`:
- Line 38: Replace the generic link text "[here]" (MD059) with a descriptive,
accessible label such as "Report NVIDIA AI concerns and vulnerabilities on
Intigriti" (or similar) while keeping the same URL; update the markdown in
skill-card.md where the string "[here]" appears so the link text clearly conveys
destination/purpose for better accessibility and scannability.

In `@skills/cuopt-server-api-python/skill-card.md`:
- Line 38: Replace the non-descriptive link text "[here]" with explicit,
descriptive link text that explains the destination (e.g., "NVIDIA VDP
vulnerability reporting portal" or "NVIDIA VDP program page") in the markdown
line containing the reporting URL; update the text around the URL in
skill-card.md so the link reads like "Please report quality, risk, security
vulnerabilities or NVIDIA AI Concerns on the NVIDIA VDP vulnerability reporting
portal." to satisfy markdownlint MD059 and improve accessibility.

In `@skills/cuopt-server-common/skill-card.md`:
- Line 38: Replace the generic anchor text "here" in the markdown link on the
line containing "Please report quality, risk, security vulnerabilities or NVIDIA
AI Concerns" with a descriptive label (e.g., "NVIDIA Vulnerability Disclosure
Program on Intigriti" or "Report vulnerabilities to NVIDIA VDP") to satisfy
MD059; update the markdown link target in skill-card.md so the link text clearly
describes the destination while keeping the same URL.

In `@skills/cuopt-user-rules/skill-card.md`:
- Line 39: Replace the non-descriptive link text
"[here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail)" with a
descriptive phrase to satisfy MD059 (e.g., "Report vulnerabilities on Intigriti"
or "NVIDIA Vulnerability Reporting (Intigriti)") so the link text describes its
destination; update the markdown in the skill-card content to use that
descriptive label instead of "here".

In `@skills/numerical-optimization-formulation/skill-card.md`:
- Line 38: Replace the non-descriptive anchor text "[here]" with a meaningful,
accessible link label (e.g., "NVIDIA AI Concerns reporting page" or "NVIDIA
Vulnerability Disclosure Program") in the string that renders the link on line
38 so the anchor describes the destination and fixes MD059; update the link
markup in the skill-card content to use the chosen descriptive phrase while
preserving the URL and existing punctuation.

In `@skills/routing-formulation/skill-card.md`:
- Line 38: The markdown uses non-descriptive link text "[here]" which violates
accessibility rule MD059; replace the generic anchor with descriptive link text
such as "report concerns on the NVIDIA VDP Intigriti program" (or similar) in
the string "Please report quality, risk, security vulnerabilities or NVIDIA AI
Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail)." so
the anchor text clearly describes the destination and purpose while keeping the
same URL and surrounding sentence.

In `@skills/skill-evolution/skill-card.md`:
- Around line 36-37: Replace the non-descriptive link text "here" in the
markdown paragraph "(For Release on NVIDIA Platforms Only) ... report quality,
risk, security vulnerabilities or NVIDIA AI Concerns here" with a specific,
descriptive link label such as "report NVIDIA AI concerns and vulnerabilities"
(or similar) so the anchor clearly describes the destination; update the
markdown link target around that phrase in skill-card.md (the paragraph
containing "report quality, risk, security vulnerabilities or NVIDIA AI
Concerns") to use the new descriptive text while preserving the existing URL.
- Around line 20-22: The relative link in skill-card.md currently points to
"skills/skill-evolution/SKILL.md" which is incorrect for this file; update the
reference to the correct sibling path (e.g., "SKILL.md" or "./SKILL.md") so the
link resolves from skill-card.md to the SKILL.md in the same skill-evolution
directory; ensure the markdown link text remains "[SKILL.md]" and verify the
link works after the change.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: bea28ffc-3d1c-47bf-bf9a-f54f7c2b58e2

📥 Commits

Reviewing files that changed from the base of the PR and between 60701ac and 6022a64.

📒 Files selected for processing (27)
  • skills/cuopt-numerical-optimization-api-c/SKILL.md
  • skills/cuopt-numerical-optimization-api-c/skill-card.md
  • skills/cuopt-numerical-optimization-api-c/skill.oms.sig
  • skills/cuopt-numerical-optimization-api-cli/SKILL.md
  • skills/cuopt-numerical-optimization-api-cli/skill-card.md
  • skills/cuopt-numerical-optimization-api-cli/skill.oms.sig
  • skills/cuopt-routing-api-python/SKILL.md
  • skills/cuopt-routing-api-python/skill-card.md
  • skills/cuopt-routing-api-python/skill.oms.sig
  • skills/cuopt-server-api-python/SKILL.md
  • skills/cuopt-server-api-python/skill-card.md
  • skills/cuopt-server-api-python/skill.oms.sig
  • skills/cuopt-server-common/SKILL.md
  • skills/cuopt-server-common/skill-card.md
  • skills/cuopt-server-common/skill.oms.sig
  • skills/cuopt-user-rules/SKILL.md
  • skills/cuopt-user-rules/skill-card.md
  • skills/cuopt-user-rules/skill.oms.sig
  • skills/numerical-optimization-formulation/SKILL.md
  • skills/numerical-optimization-formulation/skill-card.md
  • skills/numerical-optimization-formulation/skill.oms.sig
  • skills/routing-formulation/SKILL.md
  • skills/routing-formulation/skill-card.md
  • skills/routing-formulation/skill.oms.sig
  • skills/skill-evolution/SKILL.md
  • skills/skill-evolution/skill-card.md
  • skills/skill-evolution/skill.oms.sig

NVIDIA believes Trustworthy AI is a shared responsibility and we have established policies and practices to enable development for a wide array of AI applications. When downloaded or used in accordance with our terms of service, developers should work with their internal team to ensure this skill meets requirements for the relevant industry and use case and addresses unforeseen product misuse. <br>

(For Release on NVIDIA Platforms Only) <br>
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Use descriptive link text instead of “here”.

Line 40 uses generic link text, which hurts accessibility and fails MD059.

Suggested fix
-Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
+Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 40-40: Link text should be descriptive

(MD059, descriptive-link-text)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/cuopt-numerical-optimization-api-c/skill-card.md` at line 40, Replace
the generic link text "here" with descriptive link text that conveys the
destination and purpose (for example "report quality, risk, security
vulnerabilities or NVIDIA AI concerns on Intigriti"), updating the markdown in
skill-card.md where the sentence "Please report quality, risk, security
vulnerabilities or NVIDIA AI Concerns [here]" appears so it reads something like
"... Concerns on Intigriti" with the URL preserved; ensure the visible link text
is descriptive to satisfy accessibility/MD059.

NVIDIA believes Trustworthy AI is a shared responsibility and we have established policies and practices to enable development for a wide array of AI applications. When downloaded or used in accordance with our terms of service, developers should work with their internal team to ensure this skill meets requirements for the relevant industry and use case and addresses unforeseen product misuse. <br>

(For Release on NVIDIA Platforms Only) <br>
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Replace non-descriptive anchor text with a meaningful label.

Line 39 uses [here], which is non-descriptive and flagged by MD059.

Suggested fix
-Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
+Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 39-39: Link text should be descriptive

(MD059, descriptive-link-text)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/cuopt-numerical-optimization-api-cli/skill-card.md` at line 39,
Replace the non-descriptive anchor "[here]" with a meaningful label in the
markdown link on the line that currently reads "Please report quality, risk,
security vulnerabilities or NVIDIA AI Concerns
[here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail)"; change the
anchor text to a descriptive phrase (e.g., "NVIDIA VDP submission portal" or
"Intigriti NVIDIA VDP report page") while keeping the URL unchanged so the link
is accessible and MD059 is satisfied.

NVIDIA believes Trustworthy AI is a shared responsibility and we have established policies and practices to enable development for a wide array of AI applications. When downloaded or used in accordance with our terms of service, developers should work with their internal team to ensure this skill meets requirements for the relevant industry and use case and addresses unforeseen product misuse. <br>

(For Release on NVIDIA Platforms Only) <br>
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Make the reporting link text descriptive.

Line 38 uses generic [here] link text; this is an accessibility/scannability issue (MD059).

Suggested fix
-Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
+Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 38-38: Link text should be descriptive

(MD059, descriptive-link-text)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/cuopt-routing-api-python/skill-card.md` at line 38, Replace the
generic link text "[here]" (MD059) with a descriptive, accessible label such as
"Report NVIDIA AI concerns and vulnerabilities on Intigriti" (or similar) while
keeping the same URL; update the markdown in skill-card.md where the string
"[here]" appears so the link text clearly conveys destination/purpose for better
accessibility and scannability.

NVIDIA believes Trustworthy AI is a shared responsibility and we have established policies and practices to enable development for a wide array of AI applications. When downloaded or used in accordance with our terms of service, developers should work with their internal team to ensure this skill meets requirements for the relevant industry and use case and addresses unforeseen product misuse. <br>

(For Release on NVIDIA Platforms Only) <br>
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Use explicit link text for the reporting URL.

Line 38 currently uses [here], which is non-descriptive and fails markdownlint MD059.

Suggested fix
-Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
+Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 38-38: Link text should be descriptive

(MD059, descriptive-link-text)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/cuopt-server-api-python/skill-card.md` at line 38, Replace the
non-descriptive link text "[here]" with explicit, descriptive link text that
explains the destination (e.g., "NVIDIA VDP vulnerability reporting portal" or
"NVIDIA VDP program page") in the markdown line containing the reporting URL;
update the text around the URL in skill-card.md so the link reads like "Please
report quality, risk, security vulnerabilities or NVIDIA AI Concerns on the
NVIDIA VDP vulnerability reporting portal." to satisfy markdownlint MD059 and
improve accessibility.

NVIDIA believes Trustworthy AI is a shared responsibility and we have established policies and practices to enable development for a wide array of AI applications. When downloaded or used in accordance with our terms of service, developers should work with their internal team to ensure this skill meets requirements for the relevant industry and use case and addresses unforeseen product misuse. <br>

(For Release on NVIDIA Platforms Only) <br>
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Avoid generic “here” link text.

Line 38 uses generic anchor text; please replace it with a descriptive label to satisfy MD059.

Suggested fix
-Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
+Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 38-38: Link text should be descriptive

(MD059, descriptive-link-text)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/cuopt-server-common/skill-card.md` at line 38, Replace the generic
anchor text "here" in the markdown link on the line containing "Please report
quality, risk, security vulnerabilities or NVIDIA AI Concerns" with a
descriptive label (e.g., "NVIDIA Vulnerability Disclosure Program on Intigriti"
or "Report vulnerabilities to NVIDIA VDP") to satisfy MD059; update the markdown
link target in skill-card.md so the link text clearly describes the destination
while keeping the same URL.

NVIDIA believes Trustworthy AI is a shared responsibility and we have established policies and practices to enable development for a wide array of AI applications. When downloaded or used in accordance with our terms of service, developers should work with their internal team to ensure this skill meets requirements for the relevant industry and use case and addresses unforeseen product misuse. <br>

(For Release on NVIDIA Platforms Only) <br>
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Use descriptive text for the external report link.

Line 39 uses [here]; this is non-descriptive and triggers MD059.

Suggested fix
-Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
+Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 39-39: Link text should be descriptive

(MD059, descriptive-link-text)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/cuopt-user-rules/skill-card.md` at line 39, Replace the
non-descriptive link text
"[here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail)" with a
descriptive phrase to satisfy MD059 (e.g., "Report vulnerabilities on Intigriti"
or "NVIDIA Vulnerability Reporting (Intigriti)") so the link text describes its
destination; update the markdown in the skill-card content to use that
descriptive label instead of "here".

NVIDIA believes Trustworthy AI is a shared responsibility and we have established policies and practices to enable development for a wide array of AI applications. When downloaded or used in accordance with our terms of service, developers should work with their internal team to ensure this skill meets requirements for the relevant industry and use case and addresses unforeseen product misuse. <br>

(For Release on NVIDIA Platforms Only) <br>
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Improve anchor text clarity for accessibility.

Line 38 uses non-descriptive link text ([here]), which fails MD059.

Suggested fix
-Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
+Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 38-38: Link text should be descriptive

(MD059, descriptive-link-text)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/numerical-optimization-formulation/skill-card.md` at line 38, Replace
the non-descriptive anchor text "[here]" with a meaningful, accessible link
label (e.g., "NVIDIA AI Concerns reporting page" or "NVIDIA Vulnerability
Disclosure Program") in the string that renders the link on line 38 so the
anchor describes the destination and fixes MD059; update the link markup in the
skill-card content to use the chosen descriptive phrase while preserving the URL
and existing punctuation.

NVIDIA believes Trustworthy AI is a shared responsibility and we have established policies and practices to enable development for a wide array of AI applications. When downloaded or used in accordance with our terms of service, developers should work with their internal team to ensure this skill meets requirements for the relevant industry and use case and addresses unforeseen product misuse. <br>

(For Release on NVIDIA Platforms Only) <br>
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Replace [here] with descriptive link text.

Line 38 currently uses generic anchor text, reducing accessibility and violating MD059.

Suggested fix
-Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
+Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 38-38: Link text should be descriptive

(MD059, descriptive-link-text)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/routing-formulation/skill-card.md` at line 38, The markdown uses
non-descriptive link text "[here]" which violates accessibility rule MD059;
replace the generic anchor with descriptive link text such as "report concerns
on the NVIDIA VDP Intigriti program" (or similar) in the string "Please report
quality, risk, security vulnerabilities or NVIDIA AI Concerns
[here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail)." so the
anchor text clearly describes the destination and purpose while keeping the same
URL and surrounding sentence.

Comment on lines +20 to +22
## Reference(s): <br>
- [SKILL.md](skills/skill-evolution/SKILL.md) <br>

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Fix broken relative reference link.

Line 21 points to skills/skill-evolution/SKILL.md, which is likely incorrect relative to this file and can break navigation.

Suggested fix
- - [SKILL.md](skills/skill-evolution/SKILL.md) <br>
+ - [Skill documentation (SKILL.md)](./SKILL.md) <br>
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/skill-evolution/skill-card.md` around lines 20 - 22, The relative link
in skill-card.md currently points to "skills/skill-evolution/SKILL.md" which is
incorrect for this file; update the reference to the correct sibling path (e.g.,
"SKILL.md" or "./SKILL.md") so the link resolves from skill-card.md to the
SKILL.md in the same skill-evolution directory; ensure the markdown link text
remains "[SKILL.md]" and verify the link works after the change.

Comment on lines +36 to +37
(For Release on NVIDIA Platforms Only) <br>
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Use descriptive link text.

Line 37 uses “here”, which is not descriptive for accessibility and scanning.

Suggested fix
- Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
+ Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program portal](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
(For Release on NVIDIA Platforms Only) <br>
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns [here](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
(For Release on NVIDIA Platforms Only) <br>
Please report quality, risk, security vulnerabilities, or NVIDIA AI concerns via the [NVIDIA Vulnerability Disclosure Program portal](https://app.intigriti.com/programs/nvidia/nvidiavdp/detail). <br>
🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 37-37: Link text should be descriptive

(MD059, descriptive-link-text)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@skills/skill-evolution/skill-card.md` around lines 36 - 37, Replace the
non-descriptive link text "here" in the markdown paragraph "(For Release on
NVIDIA Platforms Only) ... report quality, risk, security vulnerabilities or
NVIDIA AI Concerns here" with a specific, descriptive link label such as "report
NVIDIA AI concerns and vulnerabilities" (or similar) so the anchor clearly
describes the destination; update the markdown link target around that phrase in
skill-card.md (the paragraph containing "report quality, risk, security
vulnerabilities or NVIDIA AI Concerns") to use the new descriptive text while
preserving the existing URL.

Copy link
Copy Markdown
Member

@Iroy30 Iroy30 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like this is adding approval and sign off for the skills. Approved.

Signature files are byte-exact; modifying them (e.g. adding a trailing newline)
invalidates the signature.
@rgsl888prabhu rgsl888prabhu requested a review from a team as a code owner May 19, 2026 21:33
@rgsl888prabhu rgsl888prabhu requested a review from jameslamb May 19, 2026 21:33
@rgsl888prabhu rgsl888prabhu added non-breaking Introduces a non-breaking change improvement Improves an existing functionality labels May 19, 2026
Copy link
Copy Markdown
Member

@jameslamb jameslamb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving the pre-commit changes. Please let me know if you want a review of the actual PR content.

@rgsl888prabhu
Copy link
Copy Markdown
Collaborator Author

Approving the pre-commit changes. Please let me know if you want a review of the actual PR content.

PR content is actually generated and signed by a tool, may be you can provide suggestions on how the tool can be made better.

Signature and skill-card metadata files do not affect cpp tests, python
conda tests, or python wheel tests. Excluding them avoids triggering the
full test matrix on metadata-only PRs.
@rgsl888prabhu
Copy link
Copy Markdown
Collaborator Author

/merge

@rgsl888prabhu rgsl888prabhu merged commit 33727c1 into NVIDIA:main May 19, 2026
94 of 96 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

improvement Improves an existing functionality non-breaking Introduces a non-breaking change

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants