atc-model-converter

Warn

Audited by Socket on Oct 18, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/export_onnx.py

The code is a model conversion utility with no clear malicious behavior. The significant security risk is unsafe deserialization of a user-supplied model through torch.load(..., weights_only=False), which can execute arbitrary code if the model file is malicious. Only trusted model files should be accepted, or safer weights-only loading and explicit model reconstruction should be used. The undefined epilog variable is a separate execution bug.

Confidence: 98%Severity: 62%
Audit Metadata
Analyzed At
Oct 18, 2026, 03:38 AM
Package URL
pkg:socket/skills-sh/ascend-ai-coding%2Fawesome-ascend-skills%2Fatc-model-converter%2F@bffe9808dedc4175a977f8ac8970d9c8f3c811cb55a8e951da9568fbd329a841