ai-graphics

Warn

Audited by Socket on Oct 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's graphics workflow is coherent, but it routes requests through a non-official third-party MCP and stages local images to remote storage. That scope is somewhat proportionate to image generation, yet the trust model is weak: user data and likely Fal credentials flow through third-party infrastructure/code rather than directly to Fal's official API.

Confidence: 86%Severity: 76%
Audit Metadata
Analyzed At
Oct 20, 2026, 01:32 PM
Package URL
pkg:socket/skills-sh/danielrosehill%2Fclaude-image-production-plugin%2Fai-graphics%2F@d6a1c9783d624f6f1600364d0a3a346d715c381427cde8227060cf220af2a5cc