vast-compute

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose fits remote GPU coordination on Vast.ai, but the skill's effective power is delegated to custom local scripts and background automation that are not official Vast.ai tooling and are not independently verifiable here. No direct credential theft or exfiltration is evident in the snippet, but the remote-action scope and opaque helper-script trust make this medium risk.

Confidence: 82%Severity: 56%
Audit Metadata
Analyzed At
Jun 28, 2026, 01:39 AM
Package URL
pkg:socket/skills-sh/a-canary%2Farc-skills%2Fvast-compute%2F@ed51a77ed82066f43ed37e0efdcade186d129b11bf7e41c5c89f83723a028a68
Security Audit — socket — vast-compute