tao-analyze-gaps-visual-changenet

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated purpose matches the containerized gap-analysis workflow, and there is no clear credential theft or unrelated capability. However, the skill’s core behavior depends on an unseen resolver script and an externally pulled container image whose exact provenance cannot be verified from the provided content, plus it requires transitive installation of another skill. The footprint is plausible for NVIDIA TAO analysis, but trust and reproducibility are weaker than the lightweight description suggests.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Sep 17, 2026, 02:57 AM
Package URL
pkg:socket/skills-sh/nvidia-tao%2Ftao-skill-bank%2Ftao-analyze-gaps-visual-changenet%2F@d3c426cffc649724b3081ce96da53d1b2268c8aa280c494737ca0b4aa28f6100
Security Audit — socket — tao-analyze-gaps-visual-changenet