nvidia/skills earth2studio-create-diagnostic
Checked the catalogued skill at earth2studio-create-diagnostic.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A set by no findings on this axis
8 suppressed by AI triage
The absolute path points to a known evaluation bootstrap script rather than a malicious or arbitrary file access.
Same as finding 1; the path references a legitimate script in the evaluation environment.
The script installs standard pre-commit hooks, a common and benign repository setup action
The reference to http://www.apache.org/licenses/LICENSE-2.0 is a comment about a license, not an outbound network request or permission grant.
The URL is a comment referencing the license, not an executable network call or permission grant
License URL reference in comment, no outbound call executed.
Only a comment with a URL, no executable outbound network call or permission grant.
The URL appears only in a comment header, not as an executable network call