se-dev-torch
Audited by Socket on Aug 20, 2026
1 alert found:
AnomalyThis script is primarily a build/bootstrap orchestrator, but it contains multiple supply-chain/execution risks: it executes a remote installer script via PowerShell `iex` (with ExecutionPolicy bypass) to install `uv`, downloads an external executable (`busybox64u.exe`) without integrity verification, and clones/pulls a remote GitHub repository that is then used to execute a Python script (`index_torch.py`). No clear data exfiltration, credential theft, persistence, or backdoor behavior is visible in this fragment alone, but the remote code execution surface is significant. Review the referenced scripts (`index_torch.py`, `GraphifyPrepare.bat`) and add/verify hashes/signatures for downloaded content if used in sensitive environments.