nv-generate-mr-brain-finetune
Warn
Audited by Snyk on Jul 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The skill depends at runtime on the upstream GitHub repo https://github.com/NVIDIA-Medtech/NV-Generate-CTMR (declared in the manifest and as UPSTREAM_REPO) which the manifest's install_command clones and whose scripts (e.g., scripts.diff_model_train / scripts.diff_model_create_training_data) the wrapper invokes as subprocesses, meaning remote code is fetched and executed as a required dependency.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata