setup-cellrank-remote-tool
Warn
Audited by Socket on Oct 11, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's overall purpose and capabilities are mostly coherent for deploying a ToolUniverse CellRank remote tool, and most data flows go to expected same-project endpoints. The main concern is install trust: it fetches requirements and a reviewed but non-registry wheel from project-controlled domains, plus an onrender relay backend and some unpinned package installs. This is not fundamentally incompatible with the skill's purpose, but the external wheel/backend path and partial pinning make it higher-risk than a fully registry-based, fully pinned setup.
Confidence: 85%Severity: 64%
Audit Metadata