persona-model-trainer

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/version.py

No clear malware behavior is evident. The fragment has significant correctness problems in the model-card/push section and path-validation weaknesses. Crafted version paths or an unsafe base directory can cause unintended file access or recursive deletion when the relevant commands are run; avoid invoking activate with untrusted arguments and validate paths before use.

Confidence: 98%Severity: 54%
Audit Metadata
Analyzed At
Oct 9, 2026, 10:42 AM
Package URL
pkg:socket/skills-sh/acnlabs%2Fopenpersona%2Fpersona-model-trainer%2F@80b94b7df9349a7a384f86d568b8fa5efb9c9de33ba888980c03fa5e018eb3f1