nv-segment-ct-finetune
Warn
Audited by Socket on Aug 31, 2026
1 alert found:
AnomalyAnomalyscripts/run_finetune.py
LOWAnomalyLOW
scripts/run_finetune.py
No clear evidence of intentional malware (no hardcoded secrets, no exfiltration endpoints, no reverse shell/process persistence) in this fragment. The main risks are supply-chain and execution hazards: it downloads external bundles/configs over the network, installs dependencies at runtime (pip install) and re-executes, and deserializes checkpoints using torch.load(weights_only=False), which can execute code if checkpoints are malicious. Overall, this should be treated as a potentially high-blast-radius training runner requiring trusted artifact sources and download verification.
Confidence: 61%Severity: 62%
Audit Metadata