creating-coloring-books

Warn

Audited by Socket on May 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core image-conversion purpose partly matches the fal.ai and packaging steps, but the skill is over-scoped: it embeds hard-coded credentials, reads local secrets, routes assets to a custom host, and directs autonomous multi-storefront publishing. Official package sources reduce pure supply-chain concern, yet the credential exposure, third-party data flows, and real-world posting actions make the overall skill high risk.

Confidence: 94%Severity: 90%
Audit Metadata
Analyzed At
May 18, 2026, 09:18 AM
Package URL
pkg:socket/skills-sh/delorenj%2Fskills%2Fcreating-coloring-books%2F@7142e335a8759b1877a8f85f95d48fd4cde8386b
Security Audit — socket — creating-coloring-books