borzoi

Warn

Audited by Socket on Aug 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities mostly match its bioinformatics purpose, but it depends on third-party pretrained weights from a personal Hugging Face account and references other skills for remote orchestration, creating moderate supply-chain and transitive-trust risk. Data flows are proportionate and there is no strong evidence of credential theft or overtly malicious behavior.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Aug 1, 2026, 05:34 AM
Package URL
pkg:socket/skills-sh/HughYau%2FAcademicForge%2Fborzoi%2F@9a133ceb7b18e5e90e0170aba6ff2d62948cf50f8ac748ed80c24cd3b8b9697c
Security Audit — socket — borzoi