skills/gabelul/pixeltamer-gpt-image-skill/pixeltamer/Socket

pixeltamer

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core image-generation purpose is coherent, but the trust boundary is wider than necessary. The main concerns are credential forwarding through personal skill code, a custom codex OAuth transport, and optional routing of prompts/images/API keys to third-party OpenAI-compatible hosts instead of official endpoints.

Confidence: 79%Severity: 62%

Audit Metadata

Analyzed At

Aug 20, 2026, 01:19 PM

Package URL

pkg:socket/skills-sh/gabelul%2Fpixeltamer-gpt-image-skill%2Fpixeltamer%2F@fa07c05efaef9a0e4ffc811f8e7a3372b2e39bb2