Scanned skills

nvidia/skills tao-finetune-huggingface-model

Checked the catalogued skill at tao-finetune-huggingface-model.

SkillTrust corpus scan 3 October 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 21
F Security

F; retained sample includes a critical finding · SD-001 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 21
permission_hygienehigh SD-003
SKILL.md
securityhigh SD-022
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
references/dataset-sources.md
permission_hygienehigh SD-003
references/deliverables.md
permission_hygienehigh SD-003
references/deliverables.md
permission_hygienehigh SD-003
references/deliverables.md
permission_hygienehigh SD-003
references/deliverables.md
securitycritical SD-001
references/deliverables.md
securityhigh SD-022
references/deliverables.md
2 suppressed by AI triage
securitymedium SD-012 benign_example
references/cv-scripts.md

The matched term appears only in a comment describing a Dockerfile post-install hook, not as executable code in the document.

permission_hygienehigh SD-003 benign_example
references/dataset-recommendations.md

The snippet is documentation listing dataset paths, without any '../' traversal or absolute system paths, so it poses no threat.