experiment-bridge
Warn
Audited by Socket on Apr 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s overall purpose is coherent for ML experiment automation, but its footprint is high-risk because it combines wildcard shell access, autonomous GPU actions, arbitrary repo cloning, and external model/skill handoffs. No clear credential-stealing or covert exfiltration is present, so this is not confirmed malware, but it is a high-risk automation skill.
Confidence: 85%Severity: 78%
Audit Metadata