qveris-official
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
SecuritySecurityinstruct.md
MEDIUMSecurityMEDIUM
instruct.md
This is an installation procedure with material supply-chain risk, not direct evidence of malware. It performs broad destructive cleanup, downloads executable code from a remote domain without integrity verification, executes that code, and inconsistently persists the API key in ~/.bashrc. The misspelled verification path can also cause an incomplete or misleading installation. Do not execute without reviewing and pinning the downloaded files, narrowing deletion to an explicitly approved directory, and keeping the API key session-scoped.
Confidence: 96%Severity: 78%
Audit Metadata