nv-segment-ct-finetune

Warn

Audited by Socket on Aug 31, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/run_finetune.py

No clear evidence of intentional malware (no hardcoded secrets, no exfiltration endpoints, no reverse shell/process persistence) in this fragment. The main risks are supply-chain and execution hazards: it downloads external bundles/configs over the network, installs dependencies at runtime (pip install) and re-executes, and deserializes checkpoints using torch.load(weights_only=False), which can execute code if checkpoints are malicious. Overall, this should be treated as a potentially high-blast-radius training runner requiring trusted artifact sources and download verification.

Confidence: 61%Severity: 62%
Audit Metadata
Analyzed At
Aug 31, 2026, 04:37 PM
Package URL
pkg:socket/skills-sh/nvidia%2Fskills%2Fnv-segment-ct-finetune%2F@19428443b8b704e9e45ee664ff14979813f3736656614c15715129680f98ae16
Security Audit — socket — nv-segment-ct-finetune