pixel-art-generation

Warn

Audited by Socket on Apr 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The stated purpose and capabilities are coherent for a pixel-art skill, and there is no sign of credential theft or disproportionate access in the skill text. The main risk is supply-chain and transparency: it relies on unspecified external PixelForge MCP tools, with public evidence suggesting a personal-repo, mutable-install path and unclear backend data flow.

Confidence: 79%Severity: 54%
Audit Metadata
Analyzed At
Apr 9, 2026, 02:02 AM
Package URL
pkg:socket/skills-sh/freema%2Fpixelforge-mcp%2Fpixel-art-generation%2F@e1ef84f060c2002bdff80993964a8560948fd34f