skills/hainrixz/claude-ads/ads-photoshoot/Socket

ads-photoshoot

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the workflow matches the advertised product-photography purpose, but the trust boundary is weak because the skill depends on banana-claude and an ambiguously named nanobanana-mcp that may be third-party. The largest risks are supply-chain trust and credential/data routing through external MCP tooling rather than the skill instructions themselves.

Confidence: 87%Severity: 72%

Audit Metadata

Analyzed At

Sep 22, 2026, 10:36 PM

Package URL

pkg:socket/skills-sh/hainrixz%2Fclaude-ads%2Fads-photoshoot%2F@7af301869195f2cb87201bc04704472f43a38b7b7360e90cb2e93d1b4c790ac5