tao-train-mask-auto-label
Audited by Socket on Aug 25, 2026
1 alert found:
AnomalyThis fragment is primarily a pipeline configuration that delegates all substantive behavior to an external tool/container executed with a runtime-generated configuration ({config_path}), using external templates and untrusted dataset/model artifacts. There is no direct evidence of malware (e.g., embedded payloads, obfuscated code, explicit exfiltration, or shell/backdoor behavior) within this YAML alone. However, multiple high-suspicion configuration indicators—unusual “mal” naming used as executable/arch, ambiguous container image reference, hardcoded-looking encryption_key value, marker-like inference output target, and relative template inclusion—raise meaningful supply-chain/configuration risk. A deeper review is required of the resolved templates and the actual container/tool implementation that performs “mal train/evaluate/inference.”