Scanned skills

nvidia/skills nv-generate-vae-finetune

Checked the catalogued skill at nv-generate-vae-finetune.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 9
D Security

D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

9 findings
securityhigh SD-022
SKILL.md
permission_hygienehigh SD-003
SKILL.md
transparencymedium SD-007
skill_manifest.yaml
transparencymedium SD-007
skill_manifest.yaml
transparencymedium SD-007
skill_manifest.yaml
transparencymedium SD-007
skill_manifest.yaml
transparencymedium SD-007
skill_manifest.yaml
transparencymedium SD-007
skill_manifest.yaml
transparencymedium SD-007
skill_manifest.yaml
4 suppressed by AI triage
securityhigh SD-007 benign_example
scripts/run_vae_finetune.py

The URL is in a comment header, not an executed network request.

securityhigh SD-007 benign_example
scripts/run_vae_finetune.py

The URL is only a string assignment, not an outbound network call.

securityhigh SD-007 benign_example
tests/test_run_vae_finetune.py

The matched string is a comment containing a license URL, not an executable outbound network call or permission grant.

transparencymedium SD-007 benign_example
validators/output_schema.json

The JSON Schema merely references an external schema URL; it does not contain executable code or network calls, so it is benign.