Scanned skills

nvidia/skills deepstream-import-vision-model

Checked the catalogued skill at deepstream-import-vision-model.

SkillTrust corpus scan 19 September 2026 v0.10.0 via skillsh Verify on GitHub
F AI-triaged 97
F Security

F; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 97
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
transparencymedium SD-007
evals/evals.json
transparencymedium SD-007
evals/evals.json
transparencymedium SD-007
evals/evals.json
transparencymedium SD-007
evals/evals.json
transparencymedium SD-007
evals/evals.json
transparencymedium SD-007
evals/evals.json
permission_hygienehigh SD-003
install.ps1
securityhigh SD-007
install.ps1
6 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/windows.md

The line documents a user‑supplied Windows path, not an absolute system directory or traversal attempt.

securityhigh SD-007 benign_example
scripts/deepstream/benchmark-ds.sh

The URL is a license reference in a comment, not an actual network call.

securityhigh SD-007 benign_example
scripts/model/inspect-onnx.py

Only a static license URL in a comment, not an actual outbound network call or permission grant

securityhigh SD-007 benign_example
scripts/model/make-static-batch-onnx.py

Only a static license URL in a comment, not an actual outbound network call or permission grant

securityhigh SD-007 benign_example
scripts/report/generate-benchmark-charts.py

Only a static license URL in a comment, not an actual outbound network call or permission grant

securityhigh SD-007 benign_example
scripts/report/render-mermaid-for-pdf.py

Only a static license URL in a comment, not an actual outbound network call or permission grant