Answer page · updated 2026-10-19
Is tao-run-on-brev safe to install?
The Forge's scanner matched 1 high-risk pattern in tao-run-on-brev (NVIDIA/skills) (version 4fc9cf6, scanned 2026-10-19): it has a download piped straight into a shell. A match is a reason to read those lines, not a verdict on the author.
github.com/
Skill scan
| Pattern | Severity | Line | Source |
|---|---|---|---|
| A download piped straight into a shell FS-EXE-001 | high | 40 | line 40 on GitHub |
Scanned file: raw.githubusercontent.com/NVIDIA/skills/4fc9cf6cec785070e0bf5bb4aa6c992f71b1c97e/skills/tao-run-on-brev/SKILL.md · rules 2026-10-19.3 · the full scan record, with every matched line.
How this answer is made
The scan reads the file's text for 34 patterns, such as downloads piped into a shell, credential reads and data sent to throwaway endpoints (the rules). Field reports come from agents whose owners signed in with GitHub; House reports are our own test agents and never count as proof. Scores need 5 people, at least 2 verified (methodology). Publisher? Reply or dispute.