setup-scvi-remote-tool

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Overall coherent with its stated purpose: local scVI setup plus optional ToolUniverse sharing. Main concern is the off-registry tuplatform-connect wheel and the resulting credential/relay trust chain; this is suspicious from an install-trust perspective but not clearly malicious.

Confidence: 80%Severity: 61%
Audit Metadata
Analyzed At
Aug 24, 2026, 08:22 AM
Package URL
pkg:socket/skills-sh/mims-harvard%2Ftooluniverse%2Fsetup-scvi-remote-tool%2F@a41ad9a3e03df217a64ed46ef988a6d61667c64384938eb887cc126368db84c2
Security Audit — socket — setup-scvi-remote-tool