physical-ai-video-data-augmentation

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/preflight_credentials.sh

This is a readable credential preflight script, not evidently malware. The principal security concern is sending NGC_API_KEY to an unvalidated registry-provided authentication realm. Restrict the realm to an expected HTTPS host before sending credentials. Avoid treating unrelated API-key variables as NGC credentials unless explicitly intended.

Confidence: 97%Severity: 55%
Audit Metadata
Analyzed At
Oct 8, 2026, 11:54 PM
Package URL
pkg:socket/skills-sh/nvidia%2Fphysical-ai-data-factory%2Fphysical-ai-video-data-augmentation%2F@64af621d1e34f6950c7860f8426d2d47ae4e13781cf9295e53c1ff97d6015865