nvidia/skills deepstream-import-vision-model
Checked the catalogued skill at deepstream-import-vision-model.
F; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
5 suppressed by AI triage
The path is part of documentation, not executed, so no traversal risk.
The absolute path is only referenced in comments; no code uses it to access filesystem.
The absolute path is an example in documentation, not executable code, so no threat.
The URL appears only in a comment block as a license reference, not executed by the script
The content is documentation referencing path traversal concept, not actual traversal code.