Scanned skills

nvidia/skills nv-segment-ctmr

Checked the catalogued skill at nv-segment-ctmr.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 7
D Security

D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

7 findings
securityhigh SD-022
SKILL.md
transparencymedium SD-007
skill_manifest.yaml
transparencymedium SD-007
skill_manifest.yaml
transparencymedium SD-007
skill_manifest.yaml
transparencymedium SD-007
skill_manifest.yaml
transparencymedium SD-007
skill_manifest.yaml
transparencymedium SD-007
skill_manifest.yaml
5 suppressed by AI triage
securityhigh SD-007 benign_example
scripts/run_ctmr.py

The URL appears only in a comment as a license reference and does not represent an executable network call.

securityhigh SD-007 benign_example
scripts/run_ctmr.py

The string merely defines a repository URL; no code performs an outbound HTTP request.

securityhigh SD-007 benign_example
scripts/run_ctmr.py

The URL is part of an error message guiding the user to clone the repo, not an executed network call.

securityhigh SD-007 benign_example
tests/test_run_ctmr.py

The URL appears only in a comment header, not as executable outbound network code.

transparencymedium SD-007 benign_example
validators/output_schema.json

The URL is a standard reference to the public JSON‑schema.org draft and does not grant permissions for arbitrary outbound network calls.