tao-train-action-recognition

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose and capabilities mostly align with legitimate TAO model workflows, and there is no clear credential theft or exfiltration logic. However, trust is weakened by the undocumented-looking nvcr.io/nvstaging release-candidate container path and the required transitive invocation of other skills, so the overall risk is medium rather than benign.

Confidence: 82%Severity: 52%
Audit Metadata
Analyzed At
Sep 17, 2026, 02:58 AM
Package URL
pkg:socket/skills-sh/nvidia-tao%2Ftao-skill-bank%2Ftao-train-action-recognition%2F@a3afdf5f93bc3670edbe0abaa06482909de7be9cad24f08d9b1f900ba385ed42
Security Audit — socket — tao-train-action-recognition