← back to etl-pipelines

SkillSpector · etl-pipelines

independent scanner by NVIDIA · skill by LeandroBenjaminL · how it works ↗

WARNINGmax severity: HIGHrisk score: 54

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.; Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits.

scanned 2026-08-22

Findings (12)

LOWSupply Chainconfidence: 0.5

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

assets/template-proyecto/requirements.txt

LOWSupply Chainconfidence: 0.5

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

assets/template-proyecto/requirements.txt

LOWSupply Chainconfidence: 0.5

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

assets/template-proyecto/requirements.txt

LOWSupply Chainconfidence: 0.5

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

assets/template-proyecto/requirements.txt

LOWSupply Chainconfidence: 0.5

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

assets/template-proyecto/requirements.txt

LOWSupply Chainconfidence: 0.5

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

assets/template-proyecto/requirements.txt

LOWSupply Chainconfidence: 0.5

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

assets/template-proyecto/requirements.txt

LOWSupply Chainconfidence: 0.5

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

assets/template-proyecto/requirements.txt

LOWSupply Chainconfidence: 0.5

Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.

assets/template-proyecto/requirements.txt

MEDIUMSupply Chainconfidence: 0.7

Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits.

assets/template-proyecto/requirements.txt

MEDIUMSupply Chainconfidence: 0.7

Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits.

assets/template-proyecto/requirements.txt

CRITICALSupply Chainconfidence: 0.9

Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits.

assets/template-proyecto/requirements.txt

What the verdicts mean

SkillSpector reports on SkillMD's shared five-tier scale. See how SkillSpector works ↗.

PASS

Overall severity LOW (risk score in the safe range)

CAUTION

Overall severity MEDIUM

WARNINGthis skill

Overall severity HIGH

FAIL

Overall severity CRITICAL

INCONCLUSIVE

Scan could not complete