creating-coloring-books
Warn
Audited by Socket on May 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core image-conversion purpose partly matches the fal.ai and packaging steps, but the skill is over-scoped: it embeds hard-coded credentials, reads local secrets, routes assets to a custom host, and directs autonomous multi-storefront publishing. Official package sources reduce pure supply-chain concern, yet the credential exposure, third-party data flows, and real-world posting actions make the overall skill high risk.
Confidence: 94%Severity: 90%
Audit Metadata