Scanned skills

nvidia/skills deepstream-generate-pipeline

Checked the catalogued skill at deepstream-generate-pipeline.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 20
D Security

D set by findings not listed

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 20
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
references/assembly-rules.md
permission_hygienehigh SD-003
references/assembly-rules.md
permission_hygienehigh SD-003
references/assembly-rules.md
permission_hygienehigh SD-003
references/assembly-rules.md
permission_hygienehigh SD-003
references/output-format.md
9 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
evals/evals.json

The path /tmp/test.mp4 is part of a benign test case for safe file handling, not an attack.

permission_hygienehigh SD-003 benign_example
evals/evals.json

Same test scenario; absolute path is intentional and safe.

permission_hygienehigh SD-003 benign_example
evals/evals.json

Reference to /tmp/test.mp4 is within a controlled test and not a malicious traversal.

securityhigh SD-007 benign_example
scripts/generate_pipeline.py

The matched URL is only in a comment header referring to a license, not an active outbound network request.

permission_hygienehigh SD-003 benign_example
scripts/generate_pipeline.py

The path is only present in a comment for illustrating tokenization logic, not used for file access.

securityhigh SD-007 benign_example
scripts/lint_data.py

The matched URL is only in a comment header referring to a license, not an active outbound network request.

securityhigh SD-007 benign_example
scripts/validate_pipeline.py

The matched URL is only in a comment header referring to a license, not an active outbound network request.

securityhigh SD-007 benign_example
tests/test_cli_format.py

The matched URL is only in a comment header referring to a license, not an active outbound network request.

securityhigh SD-007 benign_example
tests/test_golden.py

The matched URL is only in a comment header referring to a license, not an active outbound network request.