Nm Oracle Setup

• Analyzed: May 9, 2026, 2:22 AM
• Findings: 1
• Version: 1.0.2
• Hash: c4f53896476583f219231934e1e70eccaedfe288bab12cf8e853e7f27ca7db6e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill `nm-oracle-setup` (SKILL.md) provisions a Python environment and installs `onnxruntime` using the `uv` package manager. While the actions are aligned with the stated purpose, the skill utilizes high-risk capabilities including shell execution and network access to download and run code. Furthermore, the instructions execute a local Python module (`oracle.provision`) whose source code is not included in the bundle, making the full impact of the provisioning process unverifiable.