tao-run-on-brev

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: overall coherent for Brev-based TAO job execution, with official NVIDIA/Brev and PyPI dependencies and no clear exfiltration or malicious deception. Risk comes from transitive skill installation, mutable official installer patterns, forwarding credentials into external CLIs/remote registries, and the ability to take autonomous cloud actions on the user’s infrastructure.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Sep 22, 2026, 01:54 PM
Package URL
pkg:socket/skills-sh/nvidia%2Fskills%2Ftao-run-on-brev%2F@47da38e62cbe5658156d48397eb375ebe1654a14662b7bcbe5e49f1a768b87c0