Scanned skills
nvidia/skills dicom-series-to-volume
Checked the catalogued skill at dicom-series-to-volume.
B AI-triaged 2
A Security
A set by no findings on this axis
A Permissions
A set by no findings on this axis
B Transparency
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
2 findings
skill_manifest.yaml
validators/output_schema.json
3 suppressed by AI triage
SKILL.md
The line only calls a local script; there is no DNS lookup or dynamic hostname construction detected.
fixtures/generate_fixtures.py
Comment contains a URL only, no outbound network call or permission grant
scripts/series_to_volume.py
The URL is only a license reference in a comment, not an actual network call