Scanned skills

nvidia/skills tao-mine-aoi-images

Checked the catalogued skill at tao-mine-aoi-images.

SkillTrust corpus scan 19 September 2026 v0.10.0 via skillsh Verify on GitHub
F AI-triaged 8
F Security

F; retained sample includes a critical finding · SD-001 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

8 findings
securitycritical SD-001
hooks/mining-script-check.sh
securitycritical SD-001
hooks/mining-script-check.sh
securityhigh SD-022
hooks/mining-script-check.sh
securityhigh SD-022
hooks/mining-script-check.sh
permission_hygienehigh SD-003
references/reference-invocation.md
permission_hygienecritical SD-004
references/setup.md
securityhigh SD-022
references/setup.md
securityhigh SD-022
references/troubleshooting.md
2 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
hooks/mining-package.sh

The script writes logs to a fixed /tmp path; no user input is used to construct the path.

securitycritical SD-001 benign_example
references/outputs-and-reporting.md

The command is part of documentation; the variable comes from a fixed config, not user input, so no real shell injection risk.