skills/bahayonghang/my-ai-cli-toolkit/image-to-ui-skill/Socket

image-to-ui-skill

Warn

Audited by Socket on Aug 28, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated purpose is coherent, but the execution path is not fully trustworthy: it relies on an ambiguous `image2` command and a separately installed sibling fallback script that can receive API keys. The main concern is supply-chain and credential-forwarding risk, not confirmed malicious intent.

Confidence: 87%Severity: 84%

Audit Metadata

Analyzed At

Aug 28, 2026, 10:09 AM

Package URL

pkg:socket/skills-sh/bahayonghang%2Fmy-ai-cli-toolkit%2Fimage-to-ui-skill%2F@6f7689bbe884c29bd885de1d4e4592304bffd31a0b6f28b8e67fb5d8f094a971