Scanned skills

nvidia/skills cuopt-server-api-python

Checked the catalogued skill at cuopt-server-api-python.

SkillTrust corpus scan 19 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 29
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

B Transparency

B set by findings not listed in the stored summary

showing 10 of 29
securityhigh SD-007
BENCHMARK.md
securityhigh SD-007
BENCHMARK.md
securityhigh SD-007
SKILL.md
securityhigh SD-007
SKILL.md
securityhigh SD-007
SKILL.md
securityhigh SD-007
assets/lp_basic/client.py
securityhigh SD-007
assets/lp_basic/client.py
securityhigh SD-007
assets/lp_basic/client.py
securityhigh SD-007
assets/lp_basic/client.py
securityhigh SD-007
assets/lp_basic/client.py
2 suppressed by AI triage
securityhigh SD-007 benign_example
skill-card.md

Only mentions curl usage in documentation; no active outbound call or permission grant present.

securityhigh SD-007 benign_example
skill-card.md

The phrase appears in normal documentation about using HTTP endpoints, not in code that performs outbound calls.