pixel-art-generation
Warn
Audited by Socket on Apr 9, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The stated purpose and capabilities are coherent for a pixel-art skill, and there is no sign of credential theft or disproportionate access in the skill text. The main risk is supply-chain and transparency: it relies on unspecified external PixelForge MCP tools, with public evidence suggesting a personal-repo, mutable-install path and unclear backend data flow.
Confidence: 79%Severity: 54%
Audit Metadata