setup-scvelo-remote-tool

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Overall coherent with its stated purpose: a deployment/share skill for a remote scVelo tool. Main concerns are the non-PyPI direct wheel install for tuplatform-connect and the optional relay path that handles service credentials and exposes tool access beyond localhost. This is better classified as suspicious/medium-risk supply-chain and credential-handling exposure, not confirmed malware.

Confidence: 83%Severity: 62%
Audit Metadata
Analyzed At
Aug 24, 2026, 08:21 AM
Package URL
pkg:socket/skills-sh/mims-harvard%2Ftooluniverse%2Fsetup-scvelo-remote-tool%2F@7ac3ca5c0dff3b64a8b463f8b5ac2c974b74c6ec3b33ebb98ea6a9a4ff6c0710
Security Audit — socket — setup-scvelo-remote-tool