·
Last changedVersion:
This version did not pass the hardening gate. Hardening updated the skill content, deleted the lines high-severity poisoning findings flagged in 8 files before any model saw the skill, and independently checked the resulting changes. Classified findings before hardening: 94. Classified findings closed: 9. Classified findings remaining: 85. Unclassified scanner findings remaining: 1. Review findings closed: 26. Review findings remaining: 1.
27
52
15
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
references/apply-config.md | Privilege Escalation & Host / Cloud Compromise | Privilege escalation | High | Open | |
references/ux-conventions.md | Prompt Injection | — | High | Closed | |
references/next-steps.md | Supply Chain & Install-Time Trust | Dependency or plugin compromise | High | Open | |
references/start-app.md | Tool & MCP Manipulation | Unauthorized tool use | High | Open | |
references/troubleshooting.md | Malicious / Backdoor Behavior | Known malware signature | High | Closed | |
references/teardown-flow.md | Tool & MCP Manipulation | Unauthorized tool use | High | Open | |
scripts/apply_in_container.sh | Tool & MCP Manipulation | Unauthorized tool use | High | Open | |
scripts/add_streams.sh | Tool & MCP Manipulation | Unauthorized tool use | High | Open |
94 findings
No skill file found.
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/nvidia/skills/vss-deploy-detection-tracking-2d:latest
Apache-2.0
HARDENING.md