Scanned skills

nvidia/skills tao-run-deft-aoi

Checked the catalogued skill at tao-run-deft-aoi.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 63
F Security

F; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 63
permission_hygienehigh SD-003
cards/10-post-train.md
permission_hygienehigh SD-003
cards/10-post-train.md
securityhigh SD-022
cards/10-post-train.md
permission_hygienehigh SD-003
cards/50-mining.md
permission_hygienehigh SD-003
cards/driver.sh
permission_hygienehigh SD-003
references/deft_state.json
permission_hygienehigh SD-003
references/deft_state.json
permission_hygienehigh SD-003
references/deft_state.json
permission_hygienehigh SD-003
references/deft_state.json
permission_hygienehigh SD-003
references/deft_state.json
9 suppressed by AI triage
securitycritical SD-001 benign_example
cards/20-evaluate.md

Documentation example showing shell usage; not executed code, no malicious intent

permission_hygienehigh SD-003 benign_example
cards/README.md

The path traversal appears only in a sample command within documentation, not in executable code, so it poses no real threat.

securityhigh SD-022 benign_example
references/air-gap.md

The snippet describes an air-gapped setup with no evidence of DNS lookups or data exfiltration; the flagged pattern is a false positive.

permission_hygienehigh SD-003 benign_example
references/deft_state.json

The flagged content is generic documentation; no actual path traversal code or file operations are present

permission_hygienehigh SD-003 benign_example
references/deft_state.json

No path traversal evidence in the context; the line contains only empty content.

permission_hygienehigh SD-003 benign_example
references/deft_state.json

The file is documentation and contains no actual path traversal strings.

securityhigh SD-022 benign_example
references/visual-changenet.md

The file is documentation and the phrase appears to be a sample detection message, not an actual exfiltration configuration.

permission_hygienecritical SD-004 benign_example
references/visual-changenet.md

Documentation content references credential access patterns but likely for illustration, not real secret access.

securityhigh SD-022 benign_example
references/visual-changenet.md

Same as id 1: a documentation example.