nvidia/skills jetson-headless-mode
Checked the catalogued skill at jetson-headless-mode.
F; retained sample includes a critical finding · SD-013 · what this rule accepts as a false positive →
A set by no findings on this axis
A set by no findings on this axis
8 suppressed by AI triage
The script uses relative traversal to locate common utilities, a standard safe pattern.
Same as above; sourcing common.sh via relative path is benign.
Sourcing detect_jetson.sh via relative path is a normal dependency inclusion.
Script uses relative traversal to locate its own common scripts, which is a normal and safe pattern.
Comment indicates safe shellcheck source of a relative script path, not an external traversal.
Relative sourcing of internal detect_jetson.sh is expected for agent functionality.
Disabling systemd services is an intentional optimization for headless deployments, not malicious persistence.
Code to disable services is part of normal resource savings and reversible by design.