·
Last changedVersion:
This version passed the hardening gate. The skill content was retained without changes. Classified findings before hardening: 2. Classified findings closed: 0. Classified findings remaining: 2. Unclassified scanner findings remaining: 0. Review findings closed: 0. Review findings remaining: 12.
1
1
1
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
BENCHMARK.md | Sensitive Data & Secret Exposure | Agent snooping | Medium | Open | |
SKILL.md | Malicious Code & Command Execution | Command injection | Low | Open |
2 findings
Run before opening a PR:
Tools invoked: black, isort, pylint, ruff, mypy.
After editing imports in any Python files, always run uv run isort on those
files before committing:
Inside the container:
This installs ruff, black, isort, pylint — the same tools used by
tools/autoformat.sh and CI's linting job.
X | None, not Optional[X].snake_case for functions and variables, PascalCase for classes.pyproject.toml).except: always catch specific exception types.Get started with chainctlchainctl skill install public/nvidia/mcore-linting-and-formatting:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.chainreg.biz/public/github.com/nvidia/skills/mcore-linting-and-formatting:latest
Apache-2.0
BENCHMARK.md
HARDENING.md
LICENSE
SKILL.md
evals/evals.json
skill-card.md
skill.oms.sig