Scanned skills
nvidia/skills vss-query-analytics
Checked the catalogued skill at vss-query-analytics.
D AI-triaged 8
D Security
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
A Permissions
A set by no findings on this axis
A Transparency
A set by no findings on this axis
8 findings
evals/query_analytics.json
evals/query_analytics.json
evals/query_analytics.json
evals/query_analytics.json
evals/query_analytics.json
evals/query_analytics.json
evals/query_analytics.json
evals/query_analytics.json
4 suppressed by AI triage
SKILL.md
The curl commands target a local or internal endpoint (HOST_IP), used for legitimate skill communication.
SKILL.md
The script performs authenticated API calls to an internal MCP service, not external data exfiltration.
SKILL.md
This call retrieves data from the internal MCP service using a session ID, part of normal skill operation.
SKILL.md
The curl check verifies reachability of an internal MCP endpoint, a routine health check.