setup-borzoi-remote-tool

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core Borzoi setup is coherent, but the optional sharing path materially increases risk by installing a non-PyPI relay wheel and routing authentication plus tool traffic through externally installed relay code. The pinned hash improves integrity, yet install trust and credential forwarding remain too strong to treat as low risk.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Aug 24, 2026, 08:21 AM
Package URL
pkg:socket/skills-sh/mims-harvard%2Ftooluniverse%2Fsetup-borzoi-remote-tool%2F@1dc72401812a37fc74a7b61ed3b68242ea0e404fe839497253cec3b04f1227d5
Security Audit — socket — setup-borzoi-remote-tool