tao-train-ocrnet
Warn
Audited by Snyk on Jun 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The deploy README includes a runtime Docker command that pulls and runs a remote container image (nvcr.io/nvidia/tao/tao-toolkit:6.26.3-deploy), which fetches and executes remote code during skill runtime (references/tao-deploy-ocrnet.md), so this external URL is a runtime-executed dependency.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata