unsloth

Warn

Audited by Socket on Oct 14, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/verify_export.py

No clear malware behavior is present. The notable security risk is path traversal through candidate row IDs, allowing writes or truncation of files outside the run directory. Validate IDs and resolve/check each generated path against the run-directory root. Only execute a trusted GPU binary.

Confidence: 97%Severity: 58%
Audit Metadata
Analyzed At
Oct 14, 2026, 03:04 PM
Package URL
pkg:socket/skills-sh/magnus919%2Fagent-skills%2Funsloth%2F@fd99de09e85eb460ca3ca54a2f37a708931a98c3f8ca3e33074f0e94254249df