skills/nvidia/earth2studio/earth2studio-create-diagnostic/Socket

earth2studio-create-diagnostic

Warn

Audited by Socket on Oct 3, 2026

1 alert found:

Anomaly

Anomalyevals/targets/eval_3_target.py

LOW

AnomalyLOW

evals/targets/eval_3_target.py

No direct malware behavior is evident. The unrestricted PyTorch pickle deserialization is a significant supply-chain risk if the package artifact is not trusted and authenticated; use trusted artifacts or a safer weights-only loading format where possible.

Confidence: 98%Severity: 63%

Audit Metadata

Analyzed At

Oct 3, 2026, 05:29 PM

Package URL

pkg:socket/skills-sh/nvidia%2Fearth2studio%2Fearth2studio-create-diagnostic%2F@44629ecb36adf5060202ef852f4bedaea1a5504fa8b14cd03c30457bf24732c9