setup-scvelo-remote-tool
Warn
Audited by Socket on Aug 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
Overall coherent with its stated purpose: a deployment/share skill for a remote scVelo tool. Main concerns are the non-PyPI direct wheel install for tuplatform-connect and the optional relay path that handles service credentials and exposes tool access beyond localhost. This is better classified as suspicious/medium-risk supply-chain and credential-handling exposure, not confirmed malware.
Confidence: 83%Severity: 62%
Audit Metadata