imgsvc

Warn

Audited by Socket on Apr 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is plausible for an image search/download skill, but the actual footprint depends entirely on an unverifiable external binary with an unreachable claimed homepage and undisclosed proxy/backend endpoints. No explicit credential theft is shown, so this is not confirmed malware, but the install trust and data-flow opacity make it high risk.

Confidence: 87%Severity: 84%
Audit Metadata
Analyzed At
Apr 11, 2026, 10:48 AM
Package URL
pkg:socket/skills-sh/DotNetAge%2Fmindx%2Fimgsvc%2F@7575d8846a4055037cb256c13a6fac51fb5ce0f0
Security Audit — socket — imgsvc