fine-tuning-openvla-oft

Warn

Audited by Snyk on Oct 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (medium risk: 0.30). The skill instructs cloning the public repositories https://github.com/moojink/openvla-oft.git, https://github.com/Lifelong-Robot-Learning/LIBERO.git, and https://github.com/moojink/rlds_dataset_builder, and installing the package via pip install -e .. These are common/reputable unofficial open-source repositories.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 29, 2026, 03:22 PM
Issues
1