skills/agricidaniel/codex-seo/seo-image-gen/Socket

seo-image-gen

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill is purpose-aligned for SEO image generation, but it relies on installing/configuring third-party MCP software and passing a Google AI API key into that external runtime. This is not confirmed malware, but the trust boundary is broader than the skill description suggests and creates high supply-chain risk.

Confidence: 84%Severity: 72%

Audit Metadata

Analyzed At

Sep 19, 2026, 07:41 AM

Package URL

pkg:socket/skills-sh/agricidaniel%2Fcodex-seo%2Fseo-image-gen%2F@6498640ae1a2e256245f6fd1733baef572b96d33d11d1c781ec9514792e1bb15