fal-gamedev
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core capability is aligned with the stated game-art purpose and data largely flows to official fal-operated services, so this is not fundamentally incompatible or overtly malicious. The main concerns are supply-chain/install trust from the external `genmedia` CLI, credential forwarding to that CLI, and especially `genmedia init` causing transitive skill installation from a remote registry that exceeds what a single art-generation skill strictly needs.
Confidence: 86%Severity: 56%
Audit Metadata