9router-image
Warn
Audited by Socket on May 10, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill’s image-generation purpose is coherent, and the setup reference appears same-project and not a hidden installer. However, the actual data flow routes prompts and API credentials through an arbitrary 9Router endpoint instead of official provider APIs, creating a proxy/interception risk that is disproportionate unless the router is explicitly trusted and self-hosted.
Confidence: 86%Severity: 62%
Audit Metadata