Scanned skills

nvidia/skills dicom-series-to-volume

Checked the catalogued skill at dicom-series-to-volume.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
B AI-triaged 2
A Security

A set by no findings on this axis

A Permissions

A set by no findings on this axis

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

2 findings
transparencymedium SD-007
skill_manifest.yaml
transparencymedium SD-007
validators/output_schema.json
3 suppressed by AI triage
securityhigh SD-022 benign_example
SKILL.md

The line only calls a local script; there is no DNS lookup or dynamic hostname construction detected.

securityhigh SD-007 benign_example
fixtures/generate_fixtures.py

Comment contains a URL only, no outbound network call or permission grant

securityhigh SD-007 benign_example
scripts/series_to_volume.py

The URL is only a license reference in a comment, not an actual network call