fine-tuning-openvla-oft
Warn
Audited by Snyk on Jun 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill's quick-start and workflows explicitly run "git clone https://github.com/moojink/openvla-oft.git" (and similarly "git clone https://github.com/Lifelong-Robot-Learning/LIBERO.git") and then execute Python scripts from those clones, meaning remote repositories are fetched at setup/runtime and their code is executed, so these URLs are runtime external dependencies that control executed code.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata