tao-run-on-brev
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: overall coherent for Brev-based TAO job execution, with official NVIDIA/Brev and PyPI dependencies and no clear exfiltration or malicious deception. Risk comes from transitive skill installation, mutable official installer patterns, forwarding credentials into external CLIs/remote registries, and the ability to take autonomous cloud actions on the user’s infrastructure.
Confidence: 88%Severity: 58%
Audit Metadata