skills/halt-catch-fire/skills/p-image/Socket

p-image

Warn

Audited by Socket on Aug 3, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s image-generation purpose is coherent, but it expands trust by requiring installation of another skill and an external CLI, with mutable remote install documentation and broad `belt *` permissions. Data flows are mostly consistent with the stated service, so this looks more like medium supply-chain/transitive-trust risk than confirmed malicious behavior.

Confidence: 84%Severity: 63%

Audit Metadata

Analyzed At

Aug 3, 2026, 03:53 PM

Package URL

pkg:socket/skills-sh/halt-catch-fire%2Fskills%2Fp-image%2F@633b8a98aa5c7950ec55232a80eb6cb009277c231c405768045300f1747447c7