Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo
32 of your 148 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 1.81s · analysis 29.95s · 14.0 MB · GitHub API rate-limit (preflight)

NVIDIA-TAO/tao-skills-bank

https://github.com/NVIDIA-TAO/tao-skills-bank.git · scanned 2026-06-24 18:54 UTC (1 month ago) · 10 languages

426 raw signals (77 security + 349 graph) 0th percentile · Python · small (2-20K LoC)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month ago · v1 · 271 actionable findings from 2 signal sources. 155 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
37.7
/100
Security checks
38
45 findings
System graph
37
77.8% cov · 226 findings
Critical
5
click to filter
Agents
10
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 40.0 0.15 6.00
security_score 37.0 0.25 9.25
testing_score 0.0 0.20 0.00
documentation_score 100.0 0.15 15.00
practices_score 65.0 0.15 9.75
code_quality 57.0 0.10 5.70
Overall 1.00 45.7
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 5 High 84 Medium 121 Low 36 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 45 System graph 226 Crowd 0 Layer: Quality 51 Software 31 Cicd 6 Security 177 Network 2 Hardware 4
Scan summary Repository scanned at 37.3/100 with 77.8% coverage. It contains 1450 nodes across 0 cross-layer flows, written primarily in mixed languages. Engine surfaced 349 findings — concentrated in security (291), quality (40), software (9). Risk profile is high: 8 critical, 146 high, 106 medium. Recommended next step: open the security layer findings first — that's where the highest-impact wins live.

Showing 242 of 271 actionable findings. 426 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical Security checks security secrets conf 0.95 4 occurrences Detected a Generic API Key, potentially exposing access to various services and sensitive operations.
Gitleaks detected a committed secret or credential pattern.
3 files, 4 locations
skills/models/tao-finetune-cosmos-reason/schemas/evaluate.schema.json:62, 362 (2 hits)
skills/models/tao-finetune-cosmos-reason/references/spec_template_evaluate.yaml:13
skills/models/tao-train-dino/SKILL.md:129
high Security checks quality Quality conf 1.00 ✓ Repobility 3 occurrences Missing import: `platform` used but not imported
The file uses `platform.something(...)` but never imports `platform`. This raises NameError at runtime the first time the line executes.
3 files, 3 locations
scripts/check_tao_launch_preflight.py:312
scripts/list_tao_capabilities.py:318
scripts/list_tao_platforms.py:102
critical System graph security Skillspector conf 0.90 2 occurrences SkillSpector SC4 (supply-chain) in skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
pillow Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits. Skill: tao-finetune-huggingface-model Rule: SC4 Category: supply-chain Severity: CRITICAL Confidence: 0.90 Remediation: Update the dependency to a patched…
lines 23, 24
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt:23, 24 (2 hits)
Mcp skillSupply chainSc4
critical System graph security Skillspector conf 0.90 2 occurrences SkillSpector SC4 (supply-chain) in skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
numpy Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits. Skill: tao-finetune-huggingface-model Rule: SC4 Category: supply-chain Severity: CRITICAL Confidence: 0.90 Remediation: Update the dependency to a patched …
lines 19, 27
skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt:19, 27 (2 hits)
Mcp skillSupply chainSc4
critical System graph security Skillspector conf 0.90 2 occurrences SkillSpector SC4 (supply-chain) in skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
pillow Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits. Skill: tao-finetune-huggingface-model Rule: SC4 Category: supply-chain Severity: CRITICAL Confidence: 0.90 Remediation: Update the dependency to a patched…
lines 21, 22
skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt:21, 22 (2 hits)
Mcp skillSupply chainSc4
critical System graph security Skillspector conf 0.90 2 occurrences SkillSpector SC4 (supply-chain) in skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
pillow Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits. Skill: tao-finetune-huggingface-model Rule: SC4 Category: supply-chain Severity: CRITICAL Confidence: 0.90 Remediation: Update the dependency to a patched…
lines 23, 25
skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt:23, 25 (2 hits)
Mcp skillSupply chainSc4
low Security checks quality Quality conf 1.00 ✓ Repobility [MINED021] Path Traversal Os Join: os.path.join(user_dir, filename) where filename can contain "../" — directory escape.
Review and fix per the pattern semantics. See CWE-22 / A01:2021 for context.
skills/applications/tao-run-deft-aoi/scripts/changenet_data_pair_prepare.py:82
low Security checks security path traversal conf 0.80 [SEC013] Path Traversal — User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files.
Use os.path.realpath() and verify the path starts with your expected base directory. Use secure_filename() for uploads.
skills/applications/tao-run-deft-aoi/scripts/changenet_data_pair_prepare.py:82
high Security checks cicd CI/CD security conf 0.90 ✓ Repobility 2 occurrences GitHub Action is tag-pinned rather than SHA-pinned
Action `NVIDIA/blossom-action` tracks moving branch `@main` uses a mutable tag or branch. Pin external actions to a reviewed full commit SHA when the workflow is security-sensitive.
2 files, 2 locations
.github/workflows/blossom-ci.yml:72
.github/workflows/request-nvskills-ci.yml:20
CI/CD securitySupply chainGitHub Actions
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-211
Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in…
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-212
Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerabili…
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-213
Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in t…
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-214
Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target…
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-215
Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the targ…
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-216
Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the tar…
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-217
Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vul…
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
high Security checks software dependencies conf 0.88 transformers: PYSEC-2025-218
Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the t…
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
high System graph security Agent instructions conf 1.00 Agent instruction/config may expose a secret: skills/core/tao-launch-workflow/SKILL.md
Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only.
skills/core/tao-launch-workflow/SKILL.md:346 SecretsSkill file
high System graph security Agent instructions conf 1.00 Agent instruction/config may expose a secret: skills/platform/tao-run-on-kubernetes/SKILL.md
Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only.
skills/platform/tao-run-on-kubernetes/SKILL.md:127 SecretsSkill file
high System graph security Trivy conf 1.00 DS-0002: Image user should not be 'root' — skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/Dockerfile
Image user should not be 'root' Specify at least 1 USER command in Dockerfile with non-root user as argument Rule: DS-0002 Severity: HIGH Target: skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/Dockerfile
Misconfig
high System graph security Trivy conf 1.00 DS-0002: Image user should not be 'root' — skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/Dockerfile
Image user should not be 'root' Specify at least 1 USER command in Dockerfile with non-root user as argument Rule: DS-0002 Severity: HIGH Target: skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/Dockerfile
Misconfig
high System graph security Trivy conf 1.00 DS-0002: Image user should not be 'root' — skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/Dockerfile
Image user should not be 'root' Specify at least 1 USER command in Dockerfile with non-root user as argument Rule: DS-0002 Severity: HIGH Target: skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/Dockerfile
Misconfig
high System graph security Trivy conf 1.00 DS-0002: Image user should not be 'root' — skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/Dockerfile
Image user should not be 'root' Specify at least 1 USER command in Dockerfile with non-root user as argument Rule: DS-0002 Severity: HIGH Target: skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/Dockerfile
Misconfig
high System graph cicd CI/CD security conf 1.00 GitHub Action tracks a moving branch
NVIDIA/blossom-action@main can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
.github/workflows/blossom-ci.yml:72 CI/CD securitySupply chainGithub actions
high System graph cicd CI/CD security conf 1.00 GitHub Action tracks a moving branch
NVIDIA/skills/.github/workflows/team-request.yml@main can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
.github/workflows/request-nvskills-ci.yml:20 CI/CD securitySupply chainGithub actions
high System graph security security conf 1.00 Insecure pattern 'eval_used' in skills/applications/tao-finetune-huggingface-model/SKILL.md:303
Found a known-risky pattern (eval_used). Review and replace if possible.
skills/applications/tao-finetune-huggingface-model/SKILL.md:303 Eval used
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/infer.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/infer.py:21 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/prepare_data.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/prepare_data.py:20 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/run_eval.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/run_eval.py:20 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/train.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/train.py:48 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/infer.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/infer.py:22 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/prepare_data.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/prepare_data.py:18 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/run_eval.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/run_eval.py:22 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/train.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/train.py:113 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/infer.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/infer.py:34 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/prepare_data.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/prepare_data.py:17 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/run_eval.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/run_eval.py:20 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/train.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/train.py:95 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/infer.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/infer.py:21 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/merge_lora.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/merge_lora.py:18 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/prepare_data.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/prepare_data.py:17 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/run_eval.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/run_eval.py:23 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/train.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/train.py:47 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 9 occurrences SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/references/cv-scripts.md
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
lines 419, 684, 688, 690, 694, 696, 700, 702, +1 more
skills/applications/tao-finetune-huggingface-model/references/cv-scripts.md:419, 684, 688, 690, 694, 696, 700, 702, +1 more (9 hits)
Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/references/dataset-patterns.md
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/references/dataset-patterns.md:107 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/references/dataset-sources.md
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
skills/applications/tao-finetune-huggingface-model/references/dataset-sources.md:508 Mcp skillData exfilE2
high System graph security Skillspector conf 0.80 SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/references/hub-push.md
os.environ["HF_TOKEN"] Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.80 Remediation: Avoid reading sensitive env va…
skills/applications/tao-finetune-huggingface-model/references/hub-push.md:74 Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 4 occurrences SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/references/vlm-scripts.md
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
lines 138, 530, 600, 695
skills/applications/tao-finetune-huggingface-model/references/vlm-scripts.md:138, 530, 600, 695 (4 hits)
Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 2 occurrences SkillSpector E2 (data-exfil) in skills/applications/tao-finetune-huggingface-model/references/workflow-intake-preflight.md
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-finetune-huggingface-model Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env …
lines 259, 326
skills/applications/tao-finetune-huggingface-model/references/workflow-intake-preflight.md:259, 326 (2 hits)
Mcp skillData exfilE2
high System graph security Skillspector conf 0.80 2 occurrences SkillSpector E2 (data-exfil) in skills/applications/tao-run-automl/references/automl-examples.md
os.environ["AUTOML_LLM_API_KEY"] Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-run-automl Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.80 Remediation: Avoid reading sensitive env vars (AP…
lines 63, 92
skills/applications/tao-run-automl/references/automl-examples.md:63, 92 (2 hits)
Mcp skillData exfilE2
high System graph security Skillspector conf 0.70 SkillSpector E2 (data-exfil) in skills/applications/tao-run-deft-aoi/scripts/stage_backbone.py
os.environ.get("HF_TOKEN Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: tao-run-deft-aoi Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.70 Remediation: Avoid reading sensitive env vars (API keys…
skills/applications/tao-run-deft-aoi/scripts/stage_backbone.py:100 Mcp skillData exfilE2
high System graph security Skillspector conf 0.85 SkillSpector OH1 (output-handling) in skills/applications/tao-port-huggingface-model/references/phase-5-packaging.md
subprocess.run(cmd, shell=True, capture_output Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution. Skill: tao-port-huggingface-model Rule: OH1 Category: output-han…
skills/applications/tao-port-huggingface-model/references/phase-5-packaging.md:53 Mcp skillOutput handlingOh1
high System graph security Skillspector conf 0.85 SkillSpector OH1 (output-handling) in skills/applications/tao-port-huggingface-model/references/tao-patterns.md
subprocess.run(cmd, shell=True, capture_output Model output is used without validation or sanitization. Unvalidated output injected into downstream contexts (SQL, shell, HTML) enables injection attacks and arbitrary code execution. Skill: tao-port-huggingface-model Rule: OH1 Category: output-han…
skills/applications/tao-port-huggingface-model/references/tao-patterns.md:502 Mcp skillOutput handlingOh1
high System graph security Skillspector conf 0.70 SkillSpector P2 (prompt-injection) in skills/applications/tao-finetune-huggingface-model/references/deliverables.md
<!-- Copyright (c) 2026, NVIDIA CORPORATION. All rights reserved. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You Hidden instructions were detected in comments or invisible text. These could contain malicious di…
skills/applications/tao-finetune-huggingface-model/references/deliverables.md:1 Mcp skillPrompt injectionP2
high System graph security Skillspector conf 0.70 SkillSpector P2 (prompt-injection) in skills/applications/tao-finetune-huggingface-model/references/pipeline-skill-template.md
<!-- Copyright (c) 2026, NVIDIA CORPORATION. All rights reserved. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You Hidden instructions were detected in comments or invisible text. These could contain malicious di…
skills/applications/tao-finetune-huggingface-model/references/pipeline-skill-template.md:1 Mcp skillPrompt injectionP2
high System graph security Skillspector conf 0.70 SkillSpector P2 (prompt-injection) in skills/applications/tao-run-deft-aoi/agents/reporter.md
<!--\n====')`); do **not** use a `<!--.*?-->` regex — it stops at the first `-->` inside the block and leaves the rest as visible text. ### Step 4 — Compute every placeholder value Build a single Py Hidden instructions were detected in comments or invisible text. These could contain malicious di…
skills/applications/tao-run-deft-aoi/agents/reporter.md:38 Mcp skillPrompt injectionP2
high System graph security Skillspector conf 0.70 4 occurrences SkillSpector P2 (prompt-injection) in skills/applications/tao-run-deft-aoi/references/DEFT_Loop_Report.html
<!-- ================================================================================ DEFT Loop Final Report — TEMPLATE ============================================================================== Hidden instructions were detected in comments or invisible text. These could contain malicious di…
lines 2, 923, 947, 986
skills/applications/tao-run-deft-aoi/references/DEFT_Loop_Report.html:2, 923, 947, 986 (4 hits)
Mcp skillPrompt injectionP2
high System graph security Skillspector conf 0.60 4 occurrences SkillSpector PE3 (priv-esc) in skills/applications/tao-finetune-huggingface-model/references/deliverables.md
.env Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts. Skill: tao-finetune-huggingface-model Rule: PE3 Category: priv-esc Severity: HIGH Confidence: 0.60 Remediation: Remove references to credential paths. Use environment variables…
lines 25, 282, 283
skills/applications/tao-finetune-huggingface-model/references/deliverables.md:25, 282, 283 (4 hits)
Mcp skillPriv escPe3
high System graph security Skillspector conf 0.60 10 occurrences SkillSpector PE3 (priv-esc) in skills/applications/tao-run-deft-aoi/references/paidf-anomalygen.md
/etc/passwd Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts. Skill: tao-run-deft-aoi Rule: PE3 Category: priv-esc Severity: HIGH Confidence: 0.60 Remediation: Remove references to credential paths. Use environment variables or sec…
lines 179, 191, 206, 227, 239
skills/applications/tao-run-deft-aoi/references/paidf-anomalygen.md:179, 191, 206, 227, 239 (10 hits)
Mcp skillPriv escPe3
high System graph security Skillspector conf 0.90 2 occurrences SkillSpector PE3 (priv-esc) in skills/core/tao-launch-workflow/SKILL.md
~/.ssh/id_ed25519 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts. Skill: tao-launch-workflow Rule: PE3 Category: priv-esc Severity: HIGH Confidence: 0.90 Remediation: Remove references to credential paths. Use environment variabl…
lines 351, 352
skills/core/tao-launch-workflow/SKILL.md:351, 352 (2 hits)
Mcp skillPriv escPe3
high System graph security Skillspector conf 0.70 2 occurrences SkillSpector PE3 (priv-esc) in skills/models/tao-finetune-cosmos-reason/scripts/prepare_cosmos3_vlm_checkpoint.py
secrets.env Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts. Skill: tao-finetune-cosmos-reason Rule: PE3 Category: priv-esc Severity: HIGH Confidence: 0.70 Remediation: Remove references to credential paths. Use environment variab…
lines 277
skills/models/tao-finetune-cosmos-reason/scripts/prepare_cosmos3_vlm_checkpoint.py:277 (2 hits)
Mcp skillPriv escPe3
high System graph security Skillspector conf 0.70 SkillSpector PE3 (priv-esc) in skills/models/tao-finetune-cosmos-reason/SKILL.md
access token Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts. Skill: tao-finetune-cosmos-reason Rule: PE3 Category: priv-esc Severity: HIGH Confidence: 0.70 Remediation: Remove references to credential paths. Use environment varia…
skills/models/tao-finetune-cosmos-reason/SKILL.md:58 Mcp skillPriv escPe3
high System graph security Skillspector conf 0.85 SkillSpector RA1 (rogue-agent) in skills/applications/tao-run-inference-service/references/service.yaml
update SKILL Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors. Skill: tao-run-inference-service Rule: RA1 Category: rogue-agent Severity: HIGH Confidence: 0.…
skills/applications/tao-run-inference-service/references/service.yaml:4 Mcp skillRogue agentRa1
high System graph security Skillspector conf 0.50 4 occurrences SkillSpector SC3 (supply-chain) in skills/applications/tao-analyze-changenet-rca/skill.oms.sig
"MIICgzCCAgmgAwIBAgIUKIyS7SxNteQIiWzK1dWj85E6520wCgYIKoZIzj0EAwMwVTELMAkGA1UEBhMCVVMxGzAZBgNVBAoMEk5WSURJQSBDb3Jwb3JhdGlvbjEpMCcGA1UEAwwgTlZJRElBIEFnZW50IENhcGFiaWxpdGllcyBJQ0EgMDEwHhcNMjYwNDAxMDAwMDA Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malic…
lines 1
skills/applications/tao-analyze-changenet-rca/skill.oms.sig:1 (4 hits)
Mcp skillSupply chainSc3
high System graph security Skillspector conf 0.50 4 occurrences SkillSpector SC3 (supply-chain) in skills/applications/tao-finetune-huggingface-model/skill.oms.sig
"MIICgzCCAgmgAwIBAgIUKIyS7SxNteQIiWzK1dWj85E6520wCgYIKoZIzj0EAwMwVTELMAkGA1UEBhMCVVMxGzAZBgNVBAoMEk5WSURJQSBDb3Jwb3JhdGlvbjEpMCcGA1UEAwwgTlZJRElBIEFnZW50IENhcGFiaWxpdGllcyBJQ0EgMDEwHhcNMjYwNDAxMDAwMDA Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malic…
lines 1
skills/applications/tao-finetune-huggingface-model/skill.oms.sig:1 (4 hits)
Mcp skillSupply chainSc3
high System graph security Skillspector conf 0.50 4 occurrences SkillSpector SC3 (supply-chain) in skills/applications/tao-port-huggingface-model/skill.oms.sig
"MIICgzCCAgmgAwIBAgIUKIyS7SxNteQIiWzK1dWj85E6520wCgYIKoZIzj0EAwMwVTELMAkGA1UEBhMCVVMxGzAZBgNVBAoMEk5WSURJQSBDb3Jwb3JhdGlvbjEpMCcGA1UEAwwgTlZJRElBIEFnZW50IENhcGFiaWxpdGllcyBJQ0EgMDEwHhcNMjYwNDAxMDAwMDA Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malic…
lines 1
skills/applications/tao-port-huggingface-model/skill.oms.sig:1 (4 hits)
Mcp skillSupply chainSc3
high System graph security Skillspector conf 0.50 4 occurrences SkillSpector SC3 (supply-chain) in skills/applications/tao-run-automl-deft-pipeline/skill.oms.sig
"MIICgzCCAgmgAwIBAgIUKIyS7SxNteQIiWzK1dWj85E6520wCgYIKoZIzj0EAwMwVTELMAkGA1UEBhMCVVMxGzAZBgNVBAoMEk5WSURJQSBDb3Jwb3JhdGlvbjEpMCcGA1UEAwwgTlZJRElBIEFnZW50IENhcGFiaWxpdGllcyBJQ0EgMDEwHhcNMjYwNDAxMDAwMDA Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malic…
lines 1
skills/applications/tao-run-automl-deft-pipeline/skill.oms.sig:1 (4 hits)
Mcp skillSupply chainSc3
high System graph security Skillspector conf 0.50 4 occurrences SkillSpector SC3 (supply-chain) in skills/applications/tao-run-automl/skill.oms.sig
"MIICgzCCAgmgAwIBAgIUKIyS7SxNteQIiWzK1dWj85E6520wCgYIKoZIzj0EAwMwVTELMAkGA1UEBhMCVVMxGzAZBgNVBAoMEk5WSURJQSBDb3Jwb3JhdGlvbjEpMCcGA1UEAwwgTlZJRElBIEFnZW50IENhcGFiaWxpdGllcyBJQ0EgMDEwHhcNMjYwNDAxMDAwMDA Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malic…
lines 1
skills/applications/tao-run-automl/skill.oms.sig:1 (4 hits)
Mcp skillSupply chainSc3
high System graph security Skillspector conf 0.50 4 occurrences SkillSpector SC3 (supply-chain) in skills/applications/tao-run-deft-aoi/skill.oms.sig
"MIICgzCCAgmgAwIBAgIUKIyS7SxNteQIiWzK1dWj85E6520wCgYIKoZIzj0EAwMwVTELMAkGA1UEBhMCVVMxGzAZBgNVBAoMEk5WSURJQSBDb3Jwb3JhdGlvbjEpMCcGA1UEAwwgTlZJRElBIEFnZW50IENhcGFiaWxpdGllcyBJQ0EgMDEwHhcNMjYwNDAxMDAwMDA Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malic…
lines 1
skills/applications/tao-run-deft-aoi/skill.oms.sig:1 (4 hits)
Mcp skillSupply chainSc3
high System graph security Skillspector conf 0.50 4 occurrences SkillSpector SC3 (supply-chain) in skills/applications/tao-run-inference-service/skill.oms.sig
"MIICgzCCAgmgAwIBAgIUKIyS7SxNteQIiWzK1dWj85E6520wCgYIKoZIzj0EAwMwVTELMAkGA1UEBhMCVVMxGzAZBgNVBAoMEk5WSURJQSBDb3Jwb3JhdGlvbjEpMCcGA1UEAwwgTlZJRElBIEFnZW50IENhcGFiaWxpdGllcyBJQ0EgMDEwHhcNMjYwNDAxMDAwMDA Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malic…
lines 1
skills/applications/tao-run-inference-service/skill.oms.sig:1 (4 hits)
Mcp skillSupply chainSc3
high System graph security Skillspector conf 0.50 4 occurrences SkillSpector SC3 (supply-chain) in skills/applications/tao-train-single-step/skill.oms.sig
"MIICgzCCAgmgAwIBAgIUKIyS7SxNteQIiWzK1dWj85E6520wCgYIKoZIzj0EAwMwVTELMAkGA1UEBhMCVVMxGzAZBgNVBAoMEk5WSURJQSBDb3Jwb3JhdGlvbjEpMCcGA1UEAwwgTlZJRElBIEFnZW50IENhcGFiaWxpdGllcyBJQ0EgMDEwHhcNMjYwNDAxMDAwMDA Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malic…
lines 1
skills/applications/tao-train-single-step/skill.oms.sig:1 (4 hits)
Mcp skillSupply chainSc3
high System graph security Skillspector conf 0.50 4 occurrences SkillSpector SC3 (supply-chain) in skills/core/tao-launch-workflow/skill.oms.sig
"MIICgzCCAgmgAwIBAgIUKIyS7SxNteQIiWzK1dWj85E6520wCgYIKoZIzj0EAwMwVTELMAkGA1UEBhMCVVMxGzAZBgNVBAoMEk5WSURJQSBDb3Jwb3JhdGlvbjEpMCcGA1UEAwwgTlZJRElBIEFnZW50IENhcGFiaWxpdGllcyBJQ0EgMDEwHhcNMjYwNDAxMDAwMDA Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malic…
lines 1
skills/core/tao-launch-workflow/skill.oms.sig:1 (4 hits)
Mcp skillSupply chainSc3
high System graph security Skillspector conf 0.50 4 occurrences SkillSpector SC3 (supply-chain) in skills/core/tao-list-capabilities/skill.oms.sig
"MIICgzCCAgmgAwIBAgIUKIyS7SxNteQIiWzK1dWj85E6520wCgYIKoZIzj0EAwMwVTELMAkGA1UEBhMCVVMxGzAZBgNVBAoMEk5WSURJQSBDb3Jwb3JhdGlvbjEpMCcGA1UEAwwgTlZJRElBIEFnZW50IENhcGFiaWxpdGllcyBJQ0EgMDEwHhcNMjYwNDAxMDAwMDA Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malic…
lines 1
skills/core/tao-list-capabilities/skill.oms.sig:1 (4 hits)
Mcp skillSupply chainSc3
high System graph security Skillspector conf 0.50 4 occurrences SkillSpector SC3 (supply-chain) in skills/models/tao-finetune-clip/skill.oms.sig
"MIICgzCCAgmgAwIBAgIUKIyS7SxNteQIiWzK1dWj85E6520wCgYIKoZIzj0EAwMwVTELMAkGA1UEBhMCVVMxGzAZBgNVBAoMEk5WSURJQSBDb3Jwb3JhdGlvbjEpMCcGA1UEAwwgTlZJRElBIEFnZW50IENhcGFiaWxpdGllcyBJQ0EgMDEwHhcNMjYwNDAxMDAwMDA Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malic…
lines 1
skills/models/tao-finetune-clip/skill.oms.sig:1 (4 hits)
Mcp skillSupply chainSc3
high System graph security Skillspector conf 0.50 4 occurrences SkillSpector SC3 (supply-chain) in skills/models/tao-finetune-cosmos-embed/skill.oms.sig
"MIICgzCCAgmgAwIBAgIUKIyS7SxNteQIiWzK1dWj85E6520wCgYIKoZIzj0EAwMwVTELMAkGA1UEBhMCVVMxGzAZBgNVBAoMEk5WSURJQSBDb3Jwb3JhdGlvbjEpMCcGA1UEAwwgTlZJRElBIEFnZW50IENhcGFiaWxpdGllcyBJQ0EgMDEwHhcNMjYwNDAxMDAwMDA Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malic…
lines 1
skills/models/tao-finetune-cosmos-embed/skill.oms.sig:1 (4 hits)
Mcp skillSupply chainSc3
high System graph security Skillspector conf 0.50 4 occurrences SkillSpector SC3 (supply-chain) in skills/models/tao-finetune-cosmos-reason/skill.oms.sig
"MIICgzCCAgmgAwIBAgIUKIyS7SxNteQIiWzK1dWj85E6520wCgYIKoZIzj0EAwMwVTELMAkGA1UEBhMCVVMxGzAZBgNVBAoMEk5WSURJQSBDb3Jwb3JhdGlvbjEpMCcGA1UEAwwgTlZJRElBIEFnZW50IENhcGFiaWxpdGllcyBJQ0EgMDEwHhcNMjYwNDAxMDAwMDA Code contains obfuscation (base64, hex encoding with execution). This is often used to hide malic…
lines 1
skills/models/tao-finetune-cosmos-reason/skill.oms.sig:1 (4 hits)
Mcp skillSupply chainSc3
high System graph security Skillspector conf 0.80 SkillSpector SC4 (supply-chain) in skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
sentencepiece Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits. Skill: tao-finetune-huggingface-model Rule: SC4 Category: supply-chain Severity: HIGH Confidence: 0.80 Remediation: Update the dependency to a patc…
skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt:24 Mcp skillSupply chainSc4
high System graph security Skillspector conf 0.85 2 occurrences SkillSpector TM1 (tool-misuse) in skills/applications/tao-finetune-huggingface-model/references/deliverables.md
rm` for one-shots; keep `ENTRYPOINT ["/bin/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: tao-finetune-huggingface-model Rule: TM1 Category: tool-misuse Severity:…
lines 247, 362
skills/applications/tao-finetune-huggingface-model/references/deliverables.md:247, 362 (2 hits)
Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in skills/applications/tao-finetune-huggingface-model/references/error-playbook.md
rm` for one-shots; `ENTRYPOINT ["/bin/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: tao-finetune-huggingface-model Rule: TM1 Category: tool-misuse Severity: HIGH…
skills/applications/tao-finetune-huggingface-model/references/error-playbook.md:33 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in skills/applications/tao-finetune-huggingface-model/references/workflow-intake-preflight.md
rm -rf "$OUTPUT_DIR/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: tao-finetune-huggingface-model Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.85…
skills/applications/tao-finetune-huggingface-model/references/workflow-intake-preflight.md:398 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.85 SkillSpector TM1 (tool-misuse) in skills/applications/tao-finetune-huggingface-model/SKILL.md
rm -rf "$OUTPUT_DIR/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: tao-finetune-huggingface-model Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.85…
skills/applications/tao-finetune-huggingface-model/SKILL.md:186 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.80 SkillSpector TM1 (tool-misuse) in skills/applications/tao-port-huggingface-model/references/phase-5-packaging.md
subprocess.run(cmd, shell=True Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: tao-port-huggingface-model Rule: TM1 Category: tool-misuse Severity: HIGH Confidence…
skills/applications/tao-port-huggingface-model/references/phase-5-packaging.md:53 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.80 SkillSpector TM1 (tool-misuse) in skills/applications/tao-port-huggingface-model/references/tao-patterns.md
subprocess.run(cmd, shell=True Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: tao-port-huggingface-model Rule: TM1 Category: tool-misuse Severity: HIGH Confidence…
skills/applications/tao-port-huggingface-model/references/tao-patterns.md:502 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.80 SkillSpector TM1 (tool-misuse) in skills/applications/tao-run-deft-aoi/references/paidf-anomalygen.md
chmod 777 Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: tao-run-deft-aoi Rule: TM1 Category: tool-misuse Severity: HIGH Confidence: 0.80 Remediation: Validate a…
skills/applications/tao-run-deft-aoi/references/paidf-anomalygen.md:153 Mcp skillTool misuseTm1
high System graph security Skillspector conf 0.75 SkillSpector TM2 (tool-misuse) in skills/applications/tao-port-huggingface-model/references/docker-patterns.md
| xargs -I'{}' python -m pip install '{}' && rm Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow. Skill: tao-port-huggingface-model Rule: TM2 Category: tool-misuse Severity: HIGH Confidence: 0.75 Remediation: Limit …
skills/applications/tao-port-huggingface-model/references/docker-patterns.md:223 Mcp skillTool misuseTm2
high System graph security Skillspector conf 0.70 SkillSpector YR4 (yara) in skills/applications/tao-port-huggingface-model/references/workflow-consistency.md
Hydra args: `--config-p YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks). Skill: tao-port-huggingface-model Rule: YR4 Category: yara Severity: HIGH Confidence: 0.70 Remediation: Remove offensive tool references an…
skills/applications/tao-port-huggingface-model/references/workflow-consistency.md:95 Mcp skillYaraYr4
low Security checks quality Error handling conf 0.55 ✓ Repobility 5 occurrences Broad exception handler needs review
This handler catches Exception/BaseException. It is actionable when it swallows errors without logging, re-raising, or returning a structured error. Handlers that intentionally convert exceptions into typed error results should not be treated as high risk.
4 files, 5 locations
scripts/check_tao_launch_preflight.py:603, 839 (2 hits)
scripts/generate_dataclass_schemas.py:282
scripts/resolve_tao_image.py:118
skills/applications/tao-run-deft-aoi/scripts/stage_backbone.py:103
Error handlingquality
medium Security checks cicd CI/CD security conf 0.90 Docker build context has no .dockerignore
Without .dockerignore, build context can include source history, local env files, dependencies, and generated artifacts.
.dockerignore CI/CD securitycontainers
high Security checks cicd CI/CD security conf 0.82 4 occurrences Docker final stage has no non-root USER
Docker images run as root unless the image or Dockerfile switches to a non-root user.
4 files, 4 locations
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/Dockerfile:16
skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/Dockerfile:16
skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/Dockerfile:16
skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/Dockerfile:16
CI/CD securitycontainers
medium Security checks software dependencies conf 0.90 4 occurrences Python package `transformers` is 1 major version(s) behind (4.49.0 -> 5.12.1)
`transformers==4.49.0` is 1 major version(s) behind the latest stable release on PyPI (5.12.1). Pinned-but-stale Python dependencies drift away from upstream security and bugfix releases. This is the version-currency signal Dependabot raises.
4 files, 4 locations
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt:17
skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt:16
skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt:15
skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt:16
medium Security checks software dependencies conf 0.90 ✓ Repobility 9 occurrences requirements.txt: `pillow` has no version pin
Unpinned pip requirement means every fresh install may resolve a different version. Newer releases can introduce malicious code (typosquats, account compromises). Reproducible installs need exact pins.
4 files, 9 locations
skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt:23, 24, 25 (3 hits)
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt:23, 24 (2 hits)
skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt:19, 27 (2 hits)
skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt:21, 22 (2 hits)
medium Security checks quality Quality conf 0.72 Runtime environment contract is missing referenced variables
Deployment failures in the mined human reports often came from generated code that assumed runtime keys, API URLs, model credentials, or database URLs without a complete environment contract. The scanner found env vars used by source code that are not documented in the visible env template/config d…
scripts/check_tao_launch_preflight.py:651
medium Security checks software dependencies conf 0.88 transformers: GHSA-37mw-44qp-f5jm
Transformers is vulnerable to ReDoS attack through its DonutProcessor class
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
medium Security checks software dependencies conf 0.88 transformers: GHSA-489j-g2vx-39wf
Transformers vulnerable to ReDoS attack through its SETTING_RE variable
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
medium Security checks software dependencies conf 0.88 transformers: GHSA-4w7r-h757-3r74
Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
medium Security checks software dependencies conf 0.88 transformers: GHSA-59p9-h35m-wg4g
Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
medium Security checks software dependencies conf 0.88 transformers: GHSA-69w3-r845-3855
HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
medium Security checks software dependencies conf 0.88 transformers: GHSA-9356-575x-2w9m
Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
medium Security checks software dependencies conf 0.88 transformers: GHSA-fpwr-67px-3qhx
Transformers Regular Expression Denial of Service (ReDoS) vulnerability
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
medium Security checks software dependencies conf 0.88 transformers: GHSA-jjph-296x-mrcr
Transformers vulnerable to ReDoS attack through its get_imports() function
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
medium Security checks software dependencies conf 0.88 transformers: GHSA-q2wp-rjmx-x6x9
Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
medium Security checks software dependencies conf 0.88 transformers: GHSA-qq3j-4f4f-9583
Hugging Face Transformers Regular Expression Denial of Service
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
medium Security checks software dependencies conf 0.88 transformers: GHSA-rcv9-qm8p-9p6j
Hugging Face Transformers library has Regular Expression Denial of Service
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/applications/tao-finetune-huggingface-model/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/applications/tao-finetune-huggingface-model/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/applications/tao-port-huggingface-model/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/applications/tao-port-huggingface-model/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/applications/tao-run-deft-aoi/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/applications/tao-run-deft-aoi/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-finetune-cosmos-embed/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-finetune-cosmos-embed/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-bevfusion/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-bevfusion/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-deformable-detr/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-deformable-detr/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-dino/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-dino/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-foundation-stereo/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-foundation-stereo/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-grounding-dino/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-grounding-dino/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-image-classification/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-image-classification/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-mask-auto-label/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-mask-auto-label/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-mask2former/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-mask2former/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-metric-learning-recognition/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-metric-learning-recognition/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-nvdinov2/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-nvdinov2/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-oneformer/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-oneformer/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-pose-classification/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-pose-classification/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-rtdetr/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-rtdetr/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-segformer/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-segformer/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/models/tao-train-visual-changenet/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/models/tao-train-visual-changenet/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/platform/tao-run-on-docker/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/platform/tao-run-on-docker/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/platform/tao-run-platform/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/platform/tao-run-platform/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: templates/skill-skeleton/minimal/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
templates/skill-skeleton/minimal/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: templates/skill-skeleton/model/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
templates/skill-skeleton/model/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: templates/skill-skeleton/platform/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
templates/skill-skeleton/platform/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent instructions exist but release-hardening basics are missing
AI-coder instruction files were found, but the repo is missing tests. Treat this as a contract gap: the agent is guided, but the generated output is not yet guarded by the controls that make it repeatable.
Repo hardeningGenerated repo pattern
medium System graph quality Tests conf 1.00 CI is configured but no tests are detected
A CI pipeline exists, but the scan found no test files to gate. Opus labeled this generated-code pattern as config theater: release machinery exists, but it has little behavioral signal.
CI/CDConfig theaterRepo hardening
medium System graph security Trivy conf 1.00 CVE-2025-1194: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
Transformers Regular Expression Denial of Service (ReDoS) vulnerability A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file `tokenization_gpt_neox_japanese.py` of the GPT-NeoX-Japanese model. The vulnerabilit…
VulnCve 2025 1194
medium System graph security Trivy conf 1.00 CVE-2025-1194: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
Transformers Regular Expression Denial of Service (ReDoS) vulnerability A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file `tokenization_gpt_neox_japanese.py` of the GPT-NeoX-Japanese model. The vulnerabilit…
VulnCve 2025 1194
medium System graph security Trivy conf 1.00 CVE-2025-1194: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
Transformers Regular Expression Denial of Service (ReDoS) vulnerability A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file `tokenization_gpt_neox_japanese.py` of the GPT-NeoX-Japanese model. The vulnerabilit…
VulnCve 2025 1194
medium System graph security Trivy conf 1.00 CVE-2025-1194: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
Transformers Regular Expression Denial of Service (ReDoS) vulnerability A Regular Expression Denial of Service (ReDoS) vulnerability was identified in the huggingface/transformers library, specifically in the file `tokenization_gpt_neox_japanese.py` of the GPT-NeoX-Japanese model. The vulnerabilit…
VulnCve 2025 1194
medium System graph security Trivy conf 1.00 CVE-2025-2099: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The …
VulnCve 2025 2099
medium System graph security Trivy conf 1.00 CVE-2025-2099: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The …
VulnCve 2025 2099
medium System graph security Trivy conf 1.00 CVE-2025-2099: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The …
VulnCve 2025 2099
medium System graph security Trivy conf 1.00 CVE-2025-2099: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) attack. The …
VulnCve 2025 2099
medium System graph security Trivy conf 1.00 CVE-2025-3262: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0. The vulnerability is due to inefficient regular expression …
VulnCve 2025 3262
medium System graph security Trivy conf 1.00 CVE-2025-3262: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0. The vulnerability is due to inefficient regular expression …
VulnCve 2025 3262
medium System graph security Trivy conf 1.00 CVE-2025-3262: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0. The vulnerability is due to inefficient regular expression …
VulnCve 2025 3262
medium System graph security Trivy conf 1.00 CVE-2025-3262: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0. The vulnerability is due to inefficient regular expression …
VulnCve 2025 3262
medium System graph security Trivy conf 1.00 CVE-2025-3263: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_configuration_file()` function within the `transformers.configuratio…
VulnCve 2025 3263
medium System graph security Trivy conf 1.00 CVE-2025-3263: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_configuration_file()` function within the `transformers.configuratio…
VulnCve 2025 3263
medium System graph security Trivy conf 1.00 CVE-2025-3263: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_configuration_file()` function within the `transformers.configuratio…
VulnCve 2025 3263
medium System graph security Trivy conf 1.00 CVE-2025-3263: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_configuration_file()` function within the `transformers.configuratio…
VulnCve 2025 3263
medium System graph security Trivy conf 1.00 CVE-2025-3264: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_imports()` function within `dynamic_module_utils.py`. This vulnerabi…
VulnCve 2025 3264
medium System graph security Trivy conf 1.00 CVE-2025-3264: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_imports()` function within `dynamic_module_utils.py`. This vulnerabi…
VulnCve 2025 3264
medium System graph security Trivy conf 1.00 CVE-2025-3264: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_imports()` function within `dynamic_module_utils.py`. This vulnerabi…
VulnCve 2025 3264
medium System graph security Trivy conf 1.00 CVE-2025-3264: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_imports()` function within `dynamic_module_utils.py`. This vulnerabi…
VulnCve 2025 3264
medium System graph security Trivy conf 1.00 CVE-2025-3933: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's `token2json()` method. This vulnerability affe…
VulnCve 2025 3933
medium System graph security Trivy conf 1.00 CVE-2025-3933: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's `token2json()` method. This vulnerability affe…
VulnCve 2025 3933
medium System graph security Trivy conf 1.00 CVE-2025-3933: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's `token2json()` method. This vulnerability affe…
VulnCve 2025 3933
medium System graph security Trivy conf 1.00 CVE-2025-3933: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's `token2json()` method. This vulnerability affe…
VulnCve 2025 3933
medium System graph security Trivy conf 1.00 CVE-2025-5197: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
transformers: Transformers ReDoS Vulnerability A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the `convert_tf_weight_name_to_pt_weight_name()` function. This function, responsible for converting TensorFlow weight names …
VulnCve 2025 5197
medium System graph security Trivy conf 1.00 CVE-2025-5197: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
transformers: Transformers ReDoS Vulnerability A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the `convert_tf_weight_name_to_pt_weight_name()` function. This function, responsible for converting TensorFlow weight names …
VulnCve 2025 5197
medium System graph security Trivy conf 1.00 CVE-2025-5197: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
transformers: Transformers ReDoS Vulnerability A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the `convert_tf_weight_name_to_pt_weight_name()` function. This function, responsible for converting TensorFlow weight names …
VulnCve 2025 5197
medium System graph security Trivy conf 1.00 CVE-2025-5197: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
transformers: Transformers ReDoS Vulnerability A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the `convert_tf_weight_name_to_pt_weight_name()` function. This function, responsible for converting TensorFlow weight names …
VulnCve 2025 5197
medium System graph security Trivy conf 1.00 CVE-2025-6051: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the `normalize_numbers()` method of the `EnglishNormalizer` class. This v…
VulnCve 2025 6051
medium System graph security Trivy conf 1.00 CVE-2025-6051: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the `normalize_numbers()` method of the `EnglishNormalizer` class. This v…
VulnCve 2025 6051
medium System graph security Trivy conf 1.00 CVE-2025-6051: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the `normalize_numbers()` method of the `EnglishNormalizer` class. This v…
VulnCve 2025 6051
medium System graph security Trivy conf 1.00 CVE-2025-6051: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the `normalize_numbers()` method of the `EnglishNormalizer` class. This v…
VulnCve 2025 6051
medium System graph security Trivy conf 1.00 CVE-2025-6638: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically affecting the MarianTokenizer's `remove_language_code()` method. This vulnerabil…
VulnCve 2025 6638
medium System graph security Trivy conf 1.00 CVE-2025-6638: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically affecting the MarianTokenizer's `remove_language_code()` method. This vulnerabil…
VulnCve 2025 6638
medium System graph security Trivy conf 1.00 CVE-2025-6638: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically affecting the MarianTokenizer's `remove_language_code()` method. This vulnerabil…
VulnCve 2025 6638
medium System graph security Trivy conf 1.00 CVE-2025-6638: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically affecting the MarianTokenizer's `remove_language_code()` method. This vulnerabil…
VulnCve 2025 6638
medium System graph security Trivy conf 1.00 CVE-2025-6921: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer. The vulnerability arises from the _do_use_weight_de…
VulnCve 2025 6921
medium System graph security Trivy conf 1.00 CVE-2025-6921: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer. The vulnerability arises from the _do_use_weight_de…
VulnCve 2025 6921
medium System graph security Trivy conf 1.00 CVE-2025-6921: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer. The vulnerability arises from the _do_use_weight_de…
VulnCve 2025 6921
medium System graph security Trivy conf 1.00 CVE-2025-6921: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
transformers: Regular Expression Denial of Service (ReDoS) in huggingface/transformers The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer. The vulnerability arises from the _do_use_weight_de…
VulnCve 2025 6921
medium System graph security Trivy conf 1.00 CVE-2026-1839: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
transformers: HuggingFace Transformers: Arbitrary code execution via malicious checkpoint file A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary code execution. The `_load_rng_state()` method in `src/transformers/trainer.py` at line …
VulnCve 2026 1839
medium System graph security Trivy conf 1.00 CVE-2026-1839: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
transformers: HuggingFace Transformers: Arbitrary code execution via malicious checkpoint file A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary code execution. The `_load_rng_state()` method in `src/transformers/trainer.py` at line …
VulnCve 2026 1839
medium System graph security Trivy conf 1.00 CVE-2026-1839: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
transformers: HuggingFace Transformers: Arbitrary code execution via malicious checkpoint file A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary code execution. The `_load_rng_state()` method in `src/transformers/trainer.py` at line …
VulnCve 2026 1839
medium System graph security Trivy conf 1.00 CVE-2026-1839: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
transformers: HuggingFace Transformers: Arbitrary code execution via malicious checkpoint file A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary code execution. The `_load_rng_state()` method in `src/transformers/trainer.py` at line …
VulnCve 2026 1839
medium System graph hardware Security conf 1.00 Dockerfile runs as root: skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/Dockerfile
No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image.
Container
medium System graph hardware Security conf 1.00 Dockerfile runs as root: skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/Dockerfile
No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image.
Container
medium System graph hardware Security conf 1.00 Dockerfile runs as root: skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/Dockerfile
No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image.
Container
medium System graph hardware Security conf 1.00 Dockerfile runs as root: skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/Dockerfile
No non-root USER set. Containers running as root expand the blast radius of any vulnerability inside the image.
Container
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — skills/models/tao-finetune-cosmos-reason/scripts/prepare_cosmos3_vlm_checkpoint.py:32
`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph security Coverage conf 1.00 No auth library detected
The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing.
auth
medium System graph network Security conf 1.00 Privileged port 23 in use
Port 23 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.
skills/applications/tao-run-inference-service/references/service.yaml Ports
medium System graph network Security conf 1.00 Privileged port 30 in use
Port 30 is privileged (<1024). Make sure the service runs with the right caps or front it with a non-privileged port via a load balancer.
skills/applications/tao-run-inference-service/references/service.yaml Ports
medium System graph security Skillspector conf 0.60 SkillSpector AST4 (behavioral-ast) in skills/models/tao-finetune-cosmos-reason/scripts/prepare_cosmos3_vlm_checkpoint.py
subprocess.run(cmd, cwd=cwd, check=True) subprocess module calls execute external commands. Without careful input validation, this enables command injection. Skill: tao-finetune-cosmos-reason Rule: AST4 Category: behavioral-ast Severity: MEDIUM Confidence: 0.60 Remediation: Use subprocess.run(…
skills/models/tao-finetune-cosmos-reason/scripts/prepare_cosmos3_vlm_checkpoint.py:32 Mcp skillBehavioral astAst4
medium System graph security Skillspector conf 0.60 SkillSpector E1 (data-exfil) in skills/applications/tao-run-inference-service/references/request.yaml
curl -s \ -H "Content-Type: application/json" \ --data-raw Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended. Skill: tao-run-inference-service Rule: E1 Category: data-exfil Severity: MEDIUM Confidence: 0.60 …
skills/applications/tao-run-inference-service/references/request.yaml:260 Mcp skillData exfilE1
medium System graph security Skillspector conf 0.75 SkillSpector EA2 (excessive-agency) in skills/applications/tao-finetune-huggingface-model/references/compat-workarounds.md
without checking Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: tao-finetune-huggingface-model Rule: EA2 Category: excessive…
skills/applications/tao-finetune-huggingface-model/references/compat-workarounds.md:109 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.75 SkillSpector EA2 (excessive-agency) in skills/applications/tao-finetune-huggingface-model/references/workflow-intake-preflight.md
without approval Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: tao-finetune-huggingface-model Rule: EA2 Category: excessive…
skills/applications/tao-finetune-huggingface-model/references/workflow-intake-preflight.md:180 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.75 SkillSpector EA2 (excessive-agency) in skills/applications/tao-finetune-huggingface-model/SKILL.md
without approval Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: tao-finetune-huggingface-model Rule: EA2 Category: excessive…
skills/applications/tao-finetune-huggingface-model/SKILL.md:143 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.85 SkillSpector EA2 (excessive-agency) in skills/applications/tao-run-automl-deft-pipeline/references/consolidated-preflight.md
auto-approve Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: tao-run-automl-deft-pipeline Rule: EA2 Category: excessive-agenc…
skills/applications/tao-run-automl-deft-pipeline/references/consolidated-preflight.md:30 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.75 SkillSpector EA2 (excessive-agency) in skills/applications/tao-run-automl/references/automl-intent-algorithms.md
without asking Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: tao-run-automl Rule: EA2 Category: excessive-agency Severity: …
skills/applications/tao-run-automl/references/automl-intent-algorithms.md:51 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.75 SkillSpector EA2 (excessive-agency) in skills/applications/tao-run-deft-aoi/SKILL.md
without asking Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: tao-run-deft-aoi Rule: EA2 Category: excessive-agency Severity…
skills/applications/tao-run-deft-aoi/SKILL.md:98 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.80 SkillSpector EA2 (excessive-agency) in skills/core/tao-launch-workflow/SKILL.md
Do not ask the user Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation. Skill: tao-launch-workflow Rule: EA2 Category: excessive-agency …
skills/core/tao-launch-workflow/SKILL.md:319 Mcp skillExcessive agencyEa2
medium System graph security Skillspector conf 0.70 SkillSpector LP3 (mcp-least-priv) in skills/applications/tao-analyze-changenet-rca/SKILL.md
MCP Least Privilege Without declared permissions the skill's intent is opaque and cannot be validated. Skill: tao-analyze-changenet-rca Rule: LP3 Category: mcp-least-priv Severity: MEDIUM Confidence: 0.70 Remediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill re…
skills/applications/tao-analyze-changenet-rca/SKILL.md:1 Mcp skillMcp least privLp3
medium System graph security Skillspector conf 0.70 SkillSpector LP3 (mcp-least-priv) in skills/applications/tao-finetune-huggingface-model/SKILL.md
MCP Least Privilege Without declared permissions the skill's intent is opaque and cannot be validated. Skill: tao-finetune-huggingface-model Rule: LP3 Category: mcp-least-priv Severity: MEDIUM Confidence: 0.70 Remediation: Add a 'permissions' field to SKILL.md listing the capabilities this ski…
skills/applications/tao-finetune-huggingface-model/SKILL.md:1 Mcp skillMcp least privLp3
medium System graph security Skillspector conf 0.70 SkillSpector LP3 (mcp-least-priv) in skills/applications/tao-run-deft-aoi/SKILL.md
MCP Least Privilege Without declared permissions the skill's intent is opaque and cannot be validated. Skill: tao-run-deft-aoi Rule: LP3 Category: mcp-least-priv Severity: MEDIUM Confidence: 0.70 Remediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill requires.
skills/applications/tao-run-deft-aoi/SKILL.md:1 Mcp skillMcp least privLp3
medium System graph security Skillspector conf 0.70 SkillSpector LP3 (mcp-least-priv) in skills/models/tao-finetune-cosmos-reason/SKILL.md
MCP Least Privilege Without declared permissions the skill's intent is opaque and cannot be validated. Skill: tao-finetune-cosmos-reason Rule: LP3 Category: mcp-least-priv Severity: MEDIUM Confidence: 0.70 Remediation: Add a 'permissions' field to SKILL.md listing the capabilities this skill r…
skills/models/tao-finetune-cosmos-reason/SKILL.md:1 Mcp skillMcp least privLp3
medium System graph security Skillspector conf 0.60 SkillSpector OH3 (output-handling) in skills/applications/tao-finetune-huggingface-model/references/compat-workarounds.md
No truncation Output size or generation rate is not bounded. Unbounded output enables denial-of-service through resource exhaustion, log flooding, or context-window stuffing. Skill: tao-finetune-huggingface-model Rule: OH3 Category: output-handling Severity: MEDIUM Confidence: 0.60 Remediation…
skills/applications/tao-finetune-huggingface-model/references/compat-workarounds.md:213 Mcp skillOutput handlingOh3
medium System graph security Skillspector conf 0.70 SkillSpector PE2 (priv-esc) in skills/applications/tao-finetune-huggingface-model/references/docker-runs.md
sudo Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: tao-finetune-huggingface-model Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.70 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If …
skills/applications/tao-finetune-huggingface-model/references/docker-runs.md:92 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.70 SkillSpector PE2 (priv-esc) in skills/applications/tao-port-huggingface-model/references/cross-cutting.md
sudo Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: tao-port-huggingface-model Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.70 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elev…
skills/applications/tao-port-huggingface-model/references/cross-cutting.md:150 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.80 SkillSpector PE2 (priv-esc) in skills/core/tao-launch-workflow/SKILL.md
chmod 600 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: tao-launch-workflow Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.80 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevat…
skills/core/tao-launch-workflow/SKILL.md:351 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.60 SkillSpector RA2 (rogue-agent) in skills/applications/tao-run-automl/references/automl-preflight-concepts.md
create runner files, workspaces, state files, logs, compatibility shims, or install dependencies until the selected platform's credentials, access check, dataset visibility, model credentials, contain Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or sta…
skills/applications/tao-run-automl/references/automl-preflight-concepts.md:63 Mcp skillRogue agentRa2
medium System graph security Skillspector conf 0.60 SkillSpector RA2 (rogue-agent) in skills/applications/tao-run-deft-aoi/eval.config
write a \"what would happen next\" placeholder, do NOT decide the run is \"too expensive\" or \"too long\". Do not preemptively shorten the work.\n\n**No human is in the loop.** Do not ask for confirm Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or sta…
skills/applications/tao-run-deft-aoi/eval.config:17 Mcp skillRogue agentRa2
medium System graph security Skillspector conf 0.60 SkillSpector RA2 (rogue-agent) in skills/applications/tao-run-deft-aoi/references/pipeline-and-state.md
write time; backfilled at loop end by align_token_usage.py>, "tokens": <object added at loop end: input, output, cache_read, cache_create, n_messages, models> } ``` `context_tokens` is a pl Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or sta…
skills/applications/tao-run-deft-aoi/references/pipeline-and-state.md:52 Mcp skillRogue agentRa2
medium System graph security Skillspector conf 0.60 SkillSpector RA2 (rogue-agent) in skills/applications/tao-run-deft-aoi/references/SCRIPT_USAGE.md
write `loop_log.jsonl` with `echo`, heredocs, or inline `jq`. The writer must compute `seq` from the live tail through `next_seq()`. ## Aligning Per-Stage Token Usage (Post-Loop) `log_stage.py` cann Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or sta…
skills/applications/tao-run-deft-aoi/references/SCRIPT_USAGE.md:57 Mcp skillRogue agentRa2
medium System graph security Skillspector conf 0.60 SkillSpector RA2 (rogue-agent) in skills/applications/tao-run-deft-aoi/scripts/align_token_usage.py
create "models": [str] # distinct model IDs seen in this stage } """ from __future__ import annotations import argparse import datetime import json import os import pathlib i Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or sta…
skills/applications/tao-run-deft-aoi/scripts/align_token_usage.py:50 Mcp skillRogue agentRa2
medium System graph security Skillspector conf 0.60 SkillSpector RA2 (rogue-agent) in skills/core/tao-launch-workflow/SKILL.md
create runner scripts, launch scripts, compatibility shims, workspace folders, state files, logs, or dependency-install side effects until the launch preflight passes. Preflight passes only after all Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or sta…
skills/core/tao-launch-workflow/SKILL.md:33 Mcp skillRogue agentRa2
medium System graph security Skillspector conf 0.70 SkillSpector TM3 (tool-misuse) in skills/applications/tao-finetune-huggingface-model/references/docker-runs.md
world-readable Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface. Skill: tao-finetune-huggingface-model Rule: TM3 Category: tool-misuse Severity: MEDIUM Confidence: 0.70 Remedi…
skills/applications/tao-finetune-huggingface-model/references/docker-runs.md:107 Mcp skillTool misuseTm3
medium System graph security Skillspector conf 0.70 SkillSpector TM3 (tool-misuse) in skills/applications/tao-run-deft-aoi/references/scripts-and-agents.md
world-writable Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface. Skill: tao-run-deft-aoi Rule: TM3 Category: tool-misuse Severity: MEDIUM Confidence: 0.70 Remediation: Overrid…
skills/applications/tao-run-deft-aoi/references/scripts-and-agents.md:65 Mcp skillTool misuseTm3
medium System graph security Skillspector conf 0.70 SkillSpector TM3 (tool-misuse) in skills/applications/tao-run-deft-aoi/SKILL.md
world-writable Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface. Skill: tao-run-deft-aoi Rule: TM3 Category: tool-misuse Severity: MEDIUM Confidence: 0.70 Remediation: Overrid…
skills/applications/tao-run-deft-aoi/SKILL.md:138 Mcp skillTool misuseTm3
medium System graph security Skillspector conf 0.60 SkillSpector TT2 (taint) in skills/applications/tao-run-deft-aoi/scripts/stage_backbone.py
shutil.copy(src, dest) Data from a source is assigned to a variable that is later passed to a sink, creating a variable-mediated taint flow. Skill: tao-run-deft-aoi Rule: TT2 Category: taint Severity: MEDIUM Confidence: 0.60 Remediation: Validate tainted variables before passing them to sinks.…
skills/applications/tao-run-deft-aoi/scripts/stage_backbone.py:111 Mcp skillTaintTt2
medium System graph quality Tests conf 1.00 Very low test-to-source ratio
0 test file(s) for 36 source file(s) (ratio 0.00). Consider adding integration or unit tests for critical paths.
Coverage
low Security checks cicd CI/CD security conf 0.90 ✓ Repobility 2 occurrences GitHub Action is tag-pinned rather than SHA-pinned
Action `actions/checkout` pinned to mutable ref `@v2` uses a mutable tag or branch. Pin external actions to a reviewed full commit SHA when the workflow is security-sensitive.
lines 52
.github/workflows/blossom-ci.yml:52 (2 hits)
CI/CD securitySupply chainGitHub Actions
low Security checks software dependencies conf 0.88 transformers: GHSA-phhr-52qp-3mj4
Transformers's Improper Input Validation vulnerability can be exploited through username injection
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
low System graph security Trivy conf 1.00 CVE-2025-3777: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
transformers: Improper Input Validation in huggingface/transformers Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability arises from insecure URL validation using the `startswith()` method, which …
VulnCve 2025 3777
low System graph security Trivy conf 1.00 CVE-2025-3777: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
transformers: Improper Input Validation in huggingface/transformers Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability arises from insecure URL validation using the `startswith()` method, which …
VulnCve 2025 3777
low System graph security Trivy conf 1.00 CVE-2025-3777: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
transformers: Improper Input Validation in huggingface/transformers Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability arises from insecure URL validation using the `startswith()` method, which …
VulnCve 2025 3777
low System graph security Trivy conf 1.00 CVE-2025-3777: transformers 4.49.0 — skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
transformers: Improper Input Validation in huggingface/transformers Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability arises from insecure URL validation using the `startswith()` method, which …
VulnCve 2025 3777
low System graph quality Debug conf 1.00 Debug logging residue appears in source files
Found 259 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup.
CleanupRepo hardeningGenerated repo pattern
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/Dockerfile
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/Dockerfile
Misconfig
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/Dockerfile
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/Dockerfile
Misconfig
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/Dockerfile
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/Dockerfile
Misconfig
low System graph security Trivy conf 1.00 DS-0026: No HEALTHCHECK defined — skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/Dockerfile
No HEALTHCHECK defined Add HEALTHCHECK instruction in your Dockerfile Rule: DS-0026 Severity: LOW Target: skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/Dockerfile
Misconfig
low System graph quality Integrity conf 1.00 4 occurrences Near-duplicate function bodies in 2 places
Functions with the same first-5-line body hash: scripts/list_tao_capabilities.py:load_json_object, scripts/list_tao_models.py:load_json This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Consolidate or document why they're separate.
4 occurrences
repo-level (4 hits)
duplicatesduplication
low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 3 places
Functions with the same first-5-line body hash: skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/train.py:main, skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/train.py:main, skills/applications/tao-finetune-huggingface-model/examples/co…
duplicatesduplication
low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 4 places
Functions with the same first-5-line body hash: skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/infer.py:main, skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/infer.py:main, skills/applications/tao-finetune-huggingface-model/examples/se…
duplicatesduplication
low System graph quality Integrity conf 1.00 Near-duplicate function bodies in 6 places
Functions with the same first-5-line body hash: scripts/list_automl_support.py:parse_args, scripts/list_tao_capabilities.py:parse_args, scripts/resolve_tao_image.py:parse_args, scripts/list_tao_models.py:parse_args This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see …
duplicatesduplication
low System graph quality Provenance conf 1.00 Shallow git history limits provenance confidence
The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence.
Git historyGenerated repo pattern
low System graph security Skillspector conf 0.65 SkillSpector EA3 (excessive-agency) in skills/applications/tao-run-automl/references/automl-intent-algorithms.md
Also run any Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface. Skill: tao-run-automl Rule: EA3 Category: excessive-agency Severity: LOW Confidence: 0.65 Rem…
skills/applications/tao-run-automl/references/automl-intent-algorithms.md:99 Mcp skillExcessive agencyEa3
low System graph security Skillspector conf 0.50 6 occurrences SkillSpector SC1 (supply-chain) in skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
datasets>=2.18 Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions. Skill: tao-finetune-huggingface-model Rule: SC1 Category: supply-chain Severity: LOW Confidence: 0.50 Remediation: Pin all dependency versions in requirements.txt or pypro…
lines 19, 20, 21, 22, 23, 24
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt:19, 20, 21, 22, 23, 24 (6 hits)
Mcp skillSupply chainSc1
low System graph security Skillspector conf 0.50 8 occurrences SkillSpector SC1 (supply-chain) in skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
datasets>=2.18 Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions. Skill: tao-finetune-huggingface-model Rule: SC1 Category: supply-chain Severity: LOW Confidence: 0.50 Remediation: Pin all dependency versions in requirements.txt or pypro…
lines 20, 21, 22, 23, 24, 25, 26, 27
skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt:20, 21, 22, 23, 24, 25, 26, 27 (8 hits)
Mcp skillSupply chainSc1
low System graph security Skillspector conf 0.50 5 occurrences SkillSpector SC1 (supply-chain) in skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
datasets>=2.18 Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions. Skill: tao-finetune-huggingface-model Rule: SC1 Category: supply-chain Severity: LOW Confidence: 0.50 Remediation: Pin all dependency versions in requirements.txt or pypro…
lines 17, 18, 19, 20, 21
skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt:17, 18, 19, 20, 21 (5 hits)
Mcp skillSupply chainSc1
low System graph security Skillspector conf 0.50 6 occurrences SkillSpector SC1 (supply-chain) in skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
datasets>=2.18 Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions. Skill: tao-finetune-huggingface-model Rule: SC1 Category: supply-chain Severity: LOW Confidence: 0.50 Remediation: Pin all dependency versions in requirements.txt or pypro…
lines 18, 19, 21, 22, 23, 24
skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt:18, 19, 21, 22, 23, 24 (6 hits)
Mcp skillSupply chainSc1
low System graph security Skillspector conf 0.60 SkillSpector SC4 (supply-chain) in skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt
transformers==4.49.0 Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits. Skill: tao-finetune-huggingface-model Rule: SC4 Category: supply-chain Severity: LOW Confidence: 0.60 Remediation: Update the dependency to …
skills/applications/tao-finetune-huggingface-model/examples/convnext-tiny-cifar10/requirements.txt:17 Mcp skillSupply chainSc4
low System graph security Skillspector conf 0.60 SkillSpector SC4 (supply-chain) in skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt
transformers==4.49.0 Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits. Skill: tao-finetune-huggingface-model Rule: SC4 Category: supply-chain Severity: LOW Confidence: 0.60 Remediation: Update the dependency to …
skills/applications/tao-finetune-huggingface-model/examples/detr-resnet50-cppe5/requirements.txt:16 Mcp skillSupply chainSc4
low System graph security Skillspector conf 0.60 SkillSpector SC4 (supply-chain) in skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt
transformers==4.49.0 Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits. Skill: tao-finetune-huggingface-model Rule: SC4 Category: supply-chain Severity: LOW Confidence: 0.60 Remediation: Update the dependency to …
skills/applications/tao-finetune-huggingface-model/examples/segformer-b0-foodseg103/requirements.txt:15 Mcp skillSupply chainSc4
low System graph security Skillspector conf 0.60 SkillSpector SC4 (supply-chain) in skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt
transformers==4.49.0 Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits. Skill: tao-finetune-huggingface-model Rule: SC4 Category: supply-chain Severity: LOW Confidence: 0.60 Remediation: Update the dependency to …
skills/applications/tao-finetune-huggingface-model/examples/smolvlm-256m-vqav2/requirements.txt:16 Mcp skillSupply chainSc4
low System graph security Skillspector conf 0.15 SkillSpector TM1 (tool-misuse) in skills/applications/tao-finetune-huggingface-model/references/deliverables.md
rm --entrypoint /bin/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: tao-finetune-huggingface-model Rule: TM1 Category: tool-misuse Severity: LOW Confidence: 0.15…
skills/applications/tao-finetune-huggingface-model/references/deliverables.md:322 Mcp skillTool misuseTm1
low System graph security Skillspector conf 0.15 6 occurrences SkillSpector TM1 (tool-misuse) in skills/applications/tao-finetune-huggingface-model/references/docker-runs.md
rm --gpus all --shm-size=16g --entrypoint /bin/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: tao-finetune-huggingface-model Rule: TM1 Category: tool-misuse Sever…
lines 122, 140, 160, 194, 210, 225
skills/applications/tao-finetune-huggingface-model/references/docker-runs.md:122, 140, 160, 194, 210, 225 (6 hits)
Mcp skillTool misuseTm1
low System graph security Skillspector conf 0.15 5 occurrences SkillSpector TM1 (tool-misuse) in skills/applications/tao-finetune-huggingface-model/references/pipeline-skill-template.md
rm --gpus all --shm-size=16g --entrypoint /bin/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: tao-finetune-huggingface-model Rule: TM1 Category: tool-misuse Sever…
lines 142, 151, 160, 181, 197
skills/applications/tao-finetune-huggingface-model/references/pipeline-skill-template.md:142, 151, 160, 181, 197 (5 hits)
Mcp skillTool misuseTm1
low System graph security Skillspector conf 0.15 4 occurrences SkillSpector TM1 (tool-misuse) in skills/applications/tao-finetune-huggingface-model/references/tao-rerun-convnext-cifar10.md
rm --gpus all --shm-size=16g --entrypoint /bin/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: tao-finetune-huggingface-model Rule: TM1 Category: tool-misuse Sever…
lines 30, 36, 42, 58
skills/applications/tao-finetune-huggingface-model/references/tao-rerun-convnext-cifar10.md:30, 36, 42, 58 (4 hits)
Mcp skillTool misuseTm1
low System graph security Skillspector conf 0.15 4 occurrences SkillSpector TM1 (tool-misuse) in skills/applications/tao-finetune-huggingface-model/references/tao-rerun-detr-cppe5.md
rm --gpus all --shm-size=16g --entrypoint /bin/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: tao-finetune-huggingface-model Rule: TM1 Category: tool-misuse Sever…
lines 20, 26, 32, 47
skills/applications/tao-finetune-huggingface-model/references/tao-rerun-detr-cppe5.md:20, 26, 32, 47 (4 hits)
Mcp skillTool misuseTm1
low System graph security Skillspector conf 0.15 4 occurrences SkillSpector TM1 (tool-misuse) in skills/applications/tao-finetune-huggingface-model/references/tao-rerun-segformer-foodseg103.md
rm --gpus all --shm-size=16g --entrypoint /bin/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: tao-finetune-huggingface-model Rule: TM1 Category: tool-misuse Sever…
lines 18, 23, 28, 41
skills/applications/tao-finetune-huggingface-model/references/tao-rerun-segformer-foodseg103.md:18, 23, 28, 41 (4 hits)
Mcp skillTool misuseTm1
low System graph security Skillspector conf 0.15 4 occurrences SkillSpector TM1 (tool-misuse) in skills/applications/tao-finetune-huggingface-model/references/tao-rerun-smolvlm-vqav2.md
rm --gpus all --shm-size=16g --entrypoint /bin/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: tao-finetune-huggingface-model Rule: TM1 Category: tool-misuse Sever…
lines 19, 25, 31, 46
skills/applications/tao-finetune-huggingface-model/references/tao-rerun-smolvlm-vqav2.md:19, 25, 31, 46 (4 hits)
Mcp skillTool misuseTm1
low System graph quality Complexity conf 1.00 Very large file: scripts/check_tao_launch_preflight.py (1626 lines)
Files with >800 lines often hide complexity hotspots and discourage tests.
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/e562650a-986f-4392-99df-8f2e78434360/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/e562650a-986f-4392-99df-8f2e78434360/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.