Scanned skills
nvidia/skills earth2studio-deterministic-forecast
Checked the catalogued skill at earth2studio-deterministic-forecast.
D AI-triaged 8
D Security
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
D Permissions
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A Transparency
A set by no findings on this axis
8 findings
BENCHMARK.md
BENCHMARK.md
evals/config.yml
evals/environment/setup/bootstrap.sh
evals/environment/setup/bootstrap.sh
evals/targets/eval_1_target.py
evals/targets/eval_2_target.py
evals/targets/eval_3_target.py
3 suppressed by AI triage
evals/environment/Dockerfile
The Dockerfile only installs curl during image build, not performing any outbound network requests.
evals/environment/Dockerfile
COPYing a file into /usr/local/bin is a normal Dockerfile operation, not a malicious path traversal.
evals/environment/Dockerfile
The chmod command targets an absolute path within the image, which is benign and common in Dockerfile setup.