nvidia/skills earth2studio-deterministic-forecast
Checked the catalogued skill at earth2studio-deterministic-forecast.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
A set by no findings on this axis
7 suppressed by AI triage
The file is documentation; the absolute path reference is descriptive, not executable.
The file is documentation; the absolute path reference is descriptive, not executable.
Copying a script to /usr/local/bin during image build is a standard practice and not a malicious path traversal.
Changing permissions on a file in /usr/local/bin during image build is benign and not a security risk.
The URL appears only in a comment header, not as an executed outbound network request.
Comment only contains a license URL, not an actual network request.
The URL appears only in a comment header, not as an executed outbound network request.