wedding-invitation-generation

Warn

Audited by Socket on Apr 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s capabilities are broadly aligned with wedding invitation generation and its credential scope is narrow, but it routes prompts and API keys to an endpoint that does not match the currently documented official Eachlabs host. That inconsistency makes the data flow less trustworthy than a standard direct-to-official-API integration, though there is no evidence of malware, obfuscation, installers, or unrelated capability creep.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Apr 24, 2026, 01:16 PM
Package URL
pkg:socket/skills-sh/Alvindean%2Fsoniq%2Fwedding-invitation-generation%2F@d3c4fa39713f1e5818900f926b6ab6d76cefc34a