tao-generate-image-grounding
Warn
Audited by Socket on Aug 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the main TAO container path is coherent and same-org NVIDIA, but the skill expands trust through transitive skill invocation and by allowing arbitrary OpenAI-compatible endpoints that receive both credentials and image/caption data. The capability fits the stated purpose, yet the open-ended endpoint routing and cross-skill dependency chain raise medium security risk.
Confidence: 86%Severity: 58%
Audit Metadata