tao-generate-image-grounding

Warn

Audited by Socket on Aug 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the main TAO container path is coherent and same-org NVIDIA, but the skill expands trust through transitive skill invocation and by allowing arbitrary OpenAI-compatible endpoints that receive both credentials and image/caption data. The capability fits the stated purpose, yet the open-ended endpoint routing and cross-skill dependency chain raise medium security risk.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Aug 25, 2026, 02:39 PM
Package URL
pkg:socket/skills-sh/nvidia%2Fskills%2Ftao-generate-image-grounding%2F@91a49504aa15d2cf92002aa24d2dc75edb0667adda9e35edaad038d48468c999
Security Audit — socket — tao-generate-image-grounding