skills/anygenio/anygen-skills/anygen-image/Socket

anygen-image

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s purpose is coherent for image generation and routing prompts to AnyGen servers is expected, but it relies on an unverified `anygen` CLI, forwards credentials to that CLI, and performs transitive skill installation. The API-key-on-command-line guidance adds avoidable secret exposure.

Confidence: 87%Severity: 83%

Audit Metadata

Analyzed At

Sep 15, 2026, 01:11 PM

Package URL

pkg:socket/skills-sh/anygenio%2Fanygen-skills%2Fanygen-image%2F@75d3a99cd06fe04f05e6dceae6e8a5c77a100e80b5e3a720c097ba5d2e91783d