fal-gamedev

Warn

Audited by Socket on Sep 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core capability is aligned with the stated game-art purpose and data largely flows to official fal-operated services, so this is not fundamentally incompatible or overtly malicious. The main concerns are supply-chain/install trust from the external `genmedia` CLI, credential forwarding to that CLI, and especially `genmedia init` causing transitive skill installation from a remote registry that exceeds what a single art-generation skill strictly needs.

Confidence: 86%Severity: 56%
Audit Metadata
Analyzed At
Sep 14, 2026, 03:59 PM
Package URL
pkg:socket/skills-sh/fal-ai-community%2Fskills%2Ffal-gamedev%2F@0db7bcd8506adadf6db7e7f1fc6f8d36e2d0abdc27096a73bff7eb6c99f6b521