setup-scvi-remote-tool
Warn
Audited by Socket on Aug 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
Overall coherent with its stated purpose: local scVI setup plus optional ToolUniverse sharing. Main concern is the off-registry tuplatform-connect wheel and the resulting credential/relay trust chain; this is suspicious from an install-trust perspective but not clearly malicious.
Confidence: 80%Severity: 61%
Audit Metadata