Scanned skills

nvidia/skills vss-setup-behavior-analytics

Checked the catalogued skill at vss-setup-behavior-analytics.

SkillTrust corpus scan 19 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 5
D Security

D; retained sample includes a high finding · SD-022 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

5 findings
permission_hygienehigh SD-003
SKILL.md
securityhigh SD-022
evals/standalone_deploy.json
securityhigh SD-022
references/deploy-behavior-analytics-service.md
permission_hygienehigh SD-003
references/dynamic-calibration.md
permission_hygienehigh SD-003
references/dynamic-calibration.md
3 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/configuration.md

The reference to '../SKILL.md' is a documentation link, not executable code that would resolve a path traversal.

permission_hygienehigh SD-003 benign_example
references/dynamic-config.md

The path traversal pattern appears only in a documentation link, not in executable code, so it poses no actual threat.

securitycritical SD-013 benign_example
references/ngc-api-key-registry-login.md

The text is a warning against modifying shell profiles, not an actual persistence change.