setup-borzoi-remote-tool
Warn
Audited by Socket on Aug 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core Borzoi setup is coherent, but the optional sharing path materially increases risk by installing a non-PyPI relay wheel and routing authentication plus tool traffic through externally installed relay code. The pinned hash improves integrity, yet install trust and credential forwarding remain too strong to treat as low risk.
Confidence: 84%Severity: 82%
Audit Metadata