skills/danielgwilson/luxin/ai-image-generation/Socket

ai-image-generation

Warn

Audited by Socket on Aug 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated image-generation purpose matches the hosted API workflow, but the skill relies on unpinned `npx` execution and asks the agent to install another skill transitively. Data flow to Luxin is proportionate to the task, yet install trust and transitive permissions make this medium risk rather than benign.

Confidence: 79%Severity: 62%

Audit Metadata

Analyzed At

Aug 23, 2026, 01:48 AM

Package URL

pkg:socket/skills-sh/danielgwilson%2Fluxin%2Fai-image-generation%2F@ac4280470bd9a72f359e586052cdaa115c69bfd0433293c3f78038fb4a931b92