tao-analyze-gaps-visual-changenet
Warn
Audited by Snyk on Jun 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill resolves and docker-pulls the tao_toolkit.data_services image at runtime (a concrete nvcr.io/... URI from versions.yaml) and then runs it via docker run, so fetching that nvcr.io container URI (tao_toolkit.data_services → nvcr.io/...) executes remote code the skill requires.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata