tao-analyze-gaps-visual-changenet

Warn

Audited by Snyk on Jun 30, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 1.00). The skill resolves and docker-pulls the tao_toolkit.data_services image at runtime (a concrete nvcr.io/... URI from versions.yaml) and then runs it via docker run, so fetching that nvcr.io container URI (tao_toolkit.data_services → nvcr.io/...) executes remote code the skill requires.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 30, 2026, 05:47 PM
Issues
1
Security Audit — snyk — tao-analyze-gaps-visual-changenet