nv-segment-ct

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Most URLs are official and benign (Hugging Face, Apache, json-schema, Medical Decathlon), but the direct S3 archive URL (https://msd-for-monai.s3-us-west-2.amazonaws.com/Task09_Spleen.tar) is a downloadable tarball hosted on an S3 bucket that the repo's fetch script downloads and extracts without path-traversal protections, so it represents a moderate-to-high risk as an archive-distribution vector for malicious payloads.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires downloading and importing the HuggingFace model bundle from https://huggingface.co/nvidia/NV-Segment-CT (via the documented huggingface-cli download), and that bundle contains Python modules (e.g., hugging_face_pipeline.py) which are added to sys.path and imported at runtime, so remote code from that URL is executed as a required dependency.