Scanned skills

nvidia/skills vss-deploy-detection-tracking-2d

Checked the catalogued skill at vss-deploy-detection-tracking-2d.

SkillTrust corpus scan 3 October 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 304
F Security

F; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B set by findings not listed in the stored summary

showing 10 of 304
securityhigh SD-007
SKILL.md
securityhigh SD-007
SKILL.md
permission_hygienehigh SD-003
assets/deploy-defaults.yml
permission_hygienehigh SD-003
assets/deploy-defaults.yml
permission_hygienehigh SD-003
assets/deploy-defaults.yml
permission_hygienehigh SD-003
assets/deploy-defaults.yml
securityhigh SD-022
evals/deploy-evals.json
securityhigh SD-022
evals/deploy-evals.json
securityhigh SD-007
evals/usage-evals.json
securityhigh SD-022
evals/usage-evals.json
2 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/pipeline-config.md

The file is documentation prose and contains no actual path traversal content, just a scanner placeholder.

permission_hygienehigh SD-003 benign_example
references/task-list.md

The path is a documented bind mount used for legitimate file access, not an exploit.