nvidia/skills nemotron-speech
Checked the catalogued skill at nemotron-speech.
D; retained sample includes a high finding · SD-011 · what this rule accepts as a false positive →
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
13 suppressed by AI triage
No path traversal strings are present in the snippet; likely a false positive.
The content is documentation prose, not code or configuration that actually uses path traversal
No path traversal evidence in the context; the line contains only empty content.
Path traversal references in the documentation are explanatory and do not imply actual file access by the software.
No path traversal or system directory references present in the file content around the flagged lines.
The documentation file contains no '../' or absolute path references.
Empty lines only, no malicious paths.
The documentation file contains no '../' or absolute path references.
The content explains a secure method to store an API key in a private file and source it in shell startup, which is a legitimate, benign practice.
The file is documentation with no actual code or dependency references; the scanner's vulnerable dependencies warning appears to be a false positive.
No actual path traversal string present, only a placeholder message
Documentation config example, not an active outbound call.
The URL is only in a comment, not an executable network call.