nemotron-asr-finetune

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities and NVIDIA-specific tooling are largely aligned with its ASR orchestration purpose, and data flows stay with official NVIDIA docs/repos rather than unrelated third parties. The main concern is transitive trust: it tells the agent to install another skill via an external CLI and recommends mutable latest-main setup, which is broader than a pure orchestration skill and adds supply-chain risk without clear pinning or verification.

Confidence: 91%Severity: 56%
Audit Metadata
Analyzed At
Sep 16, 2026, 04:48 PM
Package URL
pkg:socket/skills-sh/nvidia%2Fskills%2Fnemotron-asr-finetune%2F@f714da2f7014c961fb4f7a404f1eb6f1feed675dd6609f9cf8921a227728dbce