physical-ai-video-data-augmentation
Warn
Audited by Socket on Oct 8, 2026
1 alert found:
AnomalyAnomalyscripts/preflight_credentials.sh
LOWAnomalyLOW
scripts/preflight_credentials.sh
This is a readable credential preflight script, not evidently malware. The principal security concern is sending NGC_API_KEY to an unvalidated registry-provided authentication realm. Restrict the realm to an expected HTTPS host before sending credentials. Avoid treating unrelated API-key variables as NGC credentials unless explicitly intended.
Confidence: 97%Severity: 55%
Audit Metadata