Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add NVIDIA-TAO/tao-skill-bank --skill tao-train-dinov3git clone --depth 1 https://github.com/NVIDIA-TAO/tao-skill-bankWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/nvidia-tao/tao-skill-bank/tao-train-dinov3)<a href="https://agentmods.dev/skills/nvidia-tao/tao-skill-bank/tao-train-dinov3"><img src="https://agentmods.dev/badge/skills/nvidia-tao/tao-skill-bank/tao-train-dinov3/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/nvidia-tao/tao-skill-bank/tao-train-dinov3"><img src="https://agentmods.dev/badge/skills/nvidia-tao/tao-skill-bank/tao-train-dinov3.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 5 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 38 Potential security issue detected. Manual review is recommended.Fix: Review the flagged content for security risks. Ensure no credentials, secrets, or sensitive data are exposed.
- medium MCP Rug Pull · line 51 Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.Fix: Pin the image: image:tag or image@sha256:abc123
- medium MCP Rug Pull · line 58 Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.Fix: Pin the image: image:tag or image@sha256:abc123
- medium MCP Rug Pull · line 65 Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.Fix: Pin the image: image:tag or image@sha256:abc123
- medium MCP Rug Pull · line 72 Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.Fix: Pin the image: image:tag or image@sha256:abc123
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00117 | $0.02157 |
| Opus 5 | $0.00059 | $0.01078 |
| Sonnet 5 | $0.00023 | $0.00431 |
| Haiku 4.5 | $0.00012 | $0.00216 |
Grade A, and why
tao-train-dinov3 scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 188 lines — stays where its author put it; the contents beside it link to each section on GitHub.
DINOv3
Standalone install? If this session was not initialized by the TAO skill bank plugin, run the
tao-setupskill first.
Use this skill to continue self-supervised training of a DINOv3 backbone on unlabeled images, then convert, export, or run inference with a trained teacher checkpoint.
Quick Start (docker run)
Docker-native launch — no TAO SDK and no Python on the host. Use the local Docker/platform skill instead when it gives a stricter environment-specific command (non-root UID mapping, cache redirects, remote daemons).
TAO_PYT_IMAGE_DEFAULT=nvcr.io/nvstaging/tao/tao-toolkit-pyt:7.2.0-rc-36-multiarch # versions-key: images.tao_toolkit.pyt
TAO_PYT_IMAGE="${TAO_PYT_IMAGE:-$TAO_PYT_IMAGE_DEFAULT}"
RUN_ROOT="${RUN_ROOT:-$PWD}"
DOCKER_COMMON=(
--rm --gpus all --ipc=host
--shm-size=8g
--ulimit memlock=-1
--ulimit stack=67108864
-v "$RUN_ROOT/data:/data:ro"
-v "$RUN_ROOT/specs:/specs:ro"
-v "$RUN_ROOT/results:/results"
)
Train:
docker run "${DOCKER_COMMON[@]}" "$TAO_PYT_IMAGE" \
dinov3 train -e /specs/train.yaml
Inference:
docker run "${DOCKER_COMMON[@]}" "$TAO_PYT_IMAGE" \
dinov3 inference -e /specs/inference.yaml
Export:
docker run "${DOCKER_COMMON[@]}" "$TAO_PYT_IMAGE" \
dinov3 export -e /specs/export.yaml
Convert:
docker run "${DOCKER_COMMON[@]}" "$TAO_PYT_IMAGE" \
dinov3 convert -e /specs/convert.yaml
Every action takes its spec with -e; results_dir is set in the spec or
overridden on the command line. Mount any pretrained-weights directory the spec
references, and keep every in-container path consistent across actions.
Configuration
Use schemas/<action>.schema.json for supported fields, defaults, ranges, and options. Start from the matching references/spec_template_<action>.yaml.
Training is AutoML-enabled. Read references/skill_info.yaml and resolve an explicit automl_policy or user request before training. Default to automl_policy: on; requests such as "disable AutoML", "no HPO", or "plain training" mean off for that run. When it is on and the train schema and template are packaged, route training through tao-skill-bank:tao-run-automl. Use direct training only when the policy is off or those files are missing, and report the missing-file limitation. Non-train actions remain in this skill.
What ships with it
14 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- evals/evals.json 2.2 KB
- references/dinov3-method.md 2.3 KB
- references/dinov3-recipes.md 2.9 KB
- references/skill_info.yaml 3.5 KB
- references/spec_template_convert.yaml 2.6 KB
- references/spec_template_export.yaml 2.5 KB
- references/spec_template_inference.yaml 2.3 KB
- references/spec_template_train_highres.yaml 3.3 KB
- references/spec_template_train.yaml 3.9 KB
- schemas/convert.schema.json 56 KB
- schemas/export.schema.json 57 KB
- schemas/inference.schema.json 57 KB
- schemas/manifest.json 20 KB
- schemas/train.schema.json 54 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 13d ago First seen · 188 lines · 117 tokens per session scan A 4e5a4afab26c
tao-train-dinov3 is a skill published in the GitHub repository NVIDIA-TAO/tao-skill-bank (88 stars, last pushed yesterday), licensed Apache-2.0. It adds 117 tokens to every session and 2,157 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
learning-notes-automation
A workflow for turning videos, podcasts, and articles into structured learning notes. It extracts key ideas and creates flashcards that can be imported into Anki, a spaced-repetition study app.
adopt-pattern
Use when a developer wants to apply a low-level, systems, or concurrency design pattern in their own code, drawing on the Battle-Tested Patterns catalog of 46 production-proven patterns. Triggers three ways: they name a pattern (ring buffer, circuit breaker, actor model, LRU cache, rate limiter, trie, bloom filter…
audit-pattern
Use when reviewing or auditing an existing codebase against production-proven implementation patterns — checking whether the patterns it already implements (actor model, rate limiter, circuit breaker, LRU cache, write-ahead log, semaphore, ...) actually honor the canonical invariants, whether any are mislabeled (a…
ai-ml-v2
AI/ML Workflow Bundle workflow skill. Use this skill when the user needs AI and machine learning workflow covering LLM application development, RAG implementation, agent architecture, ML pipelines, and AI-powered features and the operator should preserve the upstream workflow, copied support files, and provenance…
ml-training
Machine learning model training authority — classifier and regressor training with scikit-learn and PyTorch, feature engineering, cross-validation, hyperparameter tuning, fine-tuning transformer models with HuggingFace, dataset splits, loss functions, learning rate schedules, and reproducible training runs.
ai-ml
AI/ML Workflow Bundle workflow skill. Use this skill when the user needs AI and machine learning workflow covering LLM application development, RAG implementation, agent architecture, ML pipelines, and AI-powered features and the operator should preserve the upstream workflow, copied support files, and provenance…