borzoi
Warn
Audited by Socket on Aug 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s capabilities mostly match its bioinformatics purpose, but it depends on third-party pretrained weights from a personal Hugging Face account and references other skills for remote orchestration, creating moderate supply-chain and transitive-trust risk. Data flows are proportionate and there is no strong evidence of credential theft or overtly malicious behavior.
Confidence: 84%Severity: 56%
Audit Metadata