game-asset-generator
Warn
Audited by Socket on Aug 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s capabilities match its stated purpose, but its data flow is mediated through a third-party gateway (`agent.deepnlp.org`) rather than direct official provider APIs, so the required access key and user prompts/assets are entrusted to an intermediary. The documented `npx onekey` path appears same-ecosystem rather than random malware distribution, which lowers install-trust concern, but the gateway-centric credential and content routing remains a medium-risk integrity issue.
Confidence: 83%Severity: 56%
Audit Metadata