nv-generate-mr-brain
Warn
Audited by Snyk on Jul 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill explicitly fetches and relies on external code/assets — git clone https://github.com/NVIDIA-Medtech/NV-Generate-CTMR and downloads from https://huggingface.co/nvidia/NV-Generate-MR-Brain — which are declared as required external_assets and are installed/run via pip and python -m scripts.download_model_data (and the upstream scripts are executed via subprocess), so remote code is fetched and executed at runtime.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata