tao-run-automl
Warn
Audited by Socket on Sep 21, 2026
1 alert found:
AnomalyAnomalycards/10-baseline-eval.md
LOWAnomalyLOW
cards/10-baseline-eval.md
The fragment is an automation script for a baseline ML training/evaluation job, not apparent malware. It executes a container with GPU privileges and access to several host directories, so trust in $TRAIN_IMG and the mounted workspace is essential. The unconditional completion marker is a significant reliability flaw and may cause downstream stages to treat failed training as complete. Shell variables should be safely quoted and the Docker exit status should be checked before creating BASELINE_JOB_DONE. No credential theft, network exfiltration, persistence, or destructive behavior is shown.
Confidence: 96%Severity: 58%
Audit Metadata