·
Last changedVersion:
This version did not pass the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 26. Classified findings closed: 0. Classified findings remaining: 27 (1 introduced by hardening). Unclassified scanner findings remaining: 0. Review findings closed: 21. Review findings remaining: 1.
3
16
7
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Obfuscation & Evasion | Trigger-based activation | High | Open | |
references/deploy-rt-vlm-service.md | Tool & MCP Manipulation | Unauthorized tool use | High | Open | |
SKILL.md | Tool & MCP Manipulation | Unauthorized tool use | High | Open | |
SKILL.md | Privilege Escalation & Host / Cloud Compromise | Privilege escalation | Medium | Open | |
references/kafka-workflows.md | Supply Chain & Install-Time Trust | — | Medium | Open | |
references/deploy-rt-vlm-service.md | Sensitive Data & Secret Exposure | Agent snooping | Medium | Open | |
SKILL.md | Sensitive Data & Secret Exposure | Hardcoded secret | Medium | Open | |
references/deploy-rt-vlm-service.md | Supply Chain & Install-Time Trust | — | Medium | Open |
27 findings
No skill file found.
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/nvidia/skills/vss-deploy-dense-captioning:latest
Apache-2.0
HARDENING.md