skills/fal-ai-community/genmedia-cli/genmedia-ref/Socket

genmedia-ref

Warn

Audited by Socket on Apr 24, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill's stated purpose is plausible for fal.ai, but its actual dependency is an unverified `genmedia` CLI that does not match fal.ai's documented official `fal` CLI. Because the skill forwards `FAL_KEY` and file data into this unverifiable tool, it triggers high supply-chain and credential-forwarding risk despite otherwise coherent functionality.

Confidence: 91%Severity: 86%

Audit Metadata

Analyzed At

Apr 24, 2026, 07:10 AM

Package URL

pkg:socket/skills-sh/fal-ai-community%2Fgenmedia-cli%2Fgenmedia-ref%2F@58912cec9955360c1454557f8bb2e7c20c1d5434