nvidia/skills nv-generate-mr
Checked the catalogued skill at nv-generate-mr.
D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
7 suppressed by AI triage
Comment contains only a license URL; no outbound network call is performed.
Docstring references a repository URL but no code makes a network request.
MODEL_REPO is a string constant; the code does not automatically fetch from the URL.
MODEL_WEIGHTS_REPO is a configuration string; no outbound call is executed.
Error message instructs manual cloning; the code does not perform any network call.
The URL appears only in a comment header, not as executable outbound network code.
The URL is merely a reference to a JSON schema, not an actual outbound call or permission grant.