setup-cellrank-remote-tool

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's overall purpose and capabilities are mostly coherent for deploying a ToolUniverse CellRank remote tool, and most data flows go to expected same-project endpoints. The main concern is install trust: it fetches requirements and a reviewed but non-registry wheel from project-controlled domains, plus an onrender relay backend and some unpinned package installs. This is not fundamentally incompatible with the skill's purpose, but the external wheel/backend path and partial pinning make it higher-risk than a fully registry-based, fully pinned setup.

Confidence: 85%Severity: 64%
Audit Metadata
Analyzed At
Oct 11, 2026, 05:28 PM
Package URL
pkg:socket/skills-sh/mims-harvard%2Ftooluniverse%2Fsetup-cellrank-remote-tool%2F@98aed4afc24da4dd9422e34be816aa2350f39a4682c1c15bb708c873b7967fb5