docker-install-agentjet-swarm-server
Audited by Socket on Mar 12, 2026
1 alert found:
Obfuscated FileThe skill demonstrates coherent alignment with its stated purpose of installing and running the AgentJet Swarm Server in Docker with GPU support. However, it relies on download-execute patterns (curl | sh) to install core tooling and uses external mirrors for container images, which constitutes notable supply-chain risk. It also passes credentials via environment variables and mounts host data (logs, experiments, weights), which are legitimate for the task but require strict access controls and secure handling. Overall, the footprint is moderately risky but not overtly malicious; it is more suspicious due to supply-chain seams and credential exposure potential. Recommend tightening source verification, avoiding loose curl | sh patterns, pinning container images and mirrors, and employing secret management for API keys and sensitive paths.