tao-run-automl

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
cards/10-baseline-eval.md

The fragment is an automation script for a baseline ML training/evaluation job, not apparent malware. It executes a container with GPU privileges and access to several host directories, so trust in $TRAIN_IMG and the mounted workspace is essential. The unconditional completion marker is a significant reliability flaw and may cause downstream stages to treat failed training as complete. Shell variables should be safely quoted and the Docker exit status should be checked before creating BASELINE_JOB_DONE. No credential theft, network exfiltration, persistence, or destructive behavior is shown.

Confidence: 96%Severity: 58%
Audit Metadata
Analyzed At
Sep 21, 2026, 02:47 AM
Package URL
pkg:socket/skills-sh/nvidia-tao%2Ftao-skill-bank%2Ftao-run-automl%2F@38f3aa2d1f6e6d536f349a56841ffab65ae8d9d656512e770f3b086dc6bfcea3
Security Audit — socket — tao-run-automl