nvidia/skills earth2studio-create-datasource

Checked the catalogued skill at earth2studio-create-datasource.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub

D AI-triaged 12

D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 12

permission_hygienehigh SD-003

evals/config.yml

securityhigh SD-007

evals/environment/Dockerfile

permission_hygienehigh SD-003

evals/environment/Dockerfile

permission_hygienehigh SD-003

evals/environment/Dockerfile

permission_hygienehigh SD-003

evals/environment/Dockerfile

securityhigh SD-007

evals/targets/eval_4_target.py

securityhigh SD-007

evals/targets/eval_4_target.py

securityhigh SD-007

evals/targets/eval_4_target.py

securityhigh SD-007

evals/targets/test/eval_4_test_target.py

securityhigh SD-007

references/implementation-guide.py

6 suppressed by AI triage

securityhigh SD-007 benign_example

evals/targets/eval_1_target.py

The content is a comment containing a license URL, not an actual outbound network call or permission grant.

securityhigh SD-007 benign_example

evals/targets/eval_2_target.py

The line is a comment referencing a license URL, not an outbound network call or permission grant.

securityhigh SD-007 benign_example

evals/targets/eval_3_target.py

The content is a comment containing a license URL, not an actual outbound network call or permission grant.

securityhigh SD-007 benign_example

evals/targets/test/eval_1_test_target.py

The content is a comment containing a license URL, not an actual outbound network call or permission grant.

securityhigh SD-007 benign_example

evals/targets/test/eval_2_test_target.py

The line is a comment referencing a license URL, not an outbound network call or permission grant.

securityhigh SD-007 benign_example

evals/targets/test/eval_3_test_target.py

The content is a comment containing a license URL, not an actual outbound network call or permission grant.