Scanned skills

nvidia/skills jetson-diagnostic

Checked the catalogued skill at jetson-diagnostic.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 12
C Security

C; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 12
permission_hygienehigh SD-003
references/tegrastats-fields.md
securitymedium SD-008
references/tegrastats-fields.md
securitymedium SD-008
references/tegrastats-fields.md
permission_hygienehigh SD-003
references/tegrastats-fields.md
permission_hygienehigh SD-003
scripts/detect_jetson.sh
permission_hygienehigh SD-003
scripts/detect_jetson.sh
permission_hygienehigh SD-003
scripts/detect_jetson.sh
permission_hygienehigh SD-003
scripts/detect_jetson.sh
permission_hygienehigh SD-003
scripts/detect_jetson.sh
permission_hygienehigh SD-003
scripts/detect_jetson.sh
2 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
scripts/runtime_probes.sh

The script correctly navigates up two directories relative to the skill script, which is a legitimate use of path traversal within an expected context.

permission_hygienehigh SD-003 benign_example
scripts/snapshot.sh

Hardcoded absolute path used only to filter /var/lib/docker mount; no user input is involved, so no path traversal risk.