nv-generate-mr-brain-finetune

Warn

Audited by Snyk on Jul 8, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 1.00). The skill depends at runtime on the upstream GitHub repo https://github.com/NVIDIA-Medtech/NV-Generate-CTMR (declared in the manifest and as UPSTREAM_REPO) which the manifest's install_command clones and whose scripts (e.g., scripts.diff_model_train / scripts.diff_model_create_training_data) the wrapper invokes as subprocesses, meaning remote code is fetched and executed as a required dependency.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 8, 2026, 07:15 PM
Issues
1
Security Audit — snyk — nv-generate-mr-brain-finetune