3d-image-renderer

Warn

Audited by Socket on Jul 9, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN in purpose and data flow, but SUSPICIOUS on install trust: the skill performs a coherent local 3D render pipeline yet relies on an undocumented bundled prebuilt native `gl` binary. Because that executable is not verifiably sourced from an official registry or same-org release path, the overall security risk is high despite low evidence of malicious intent.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Jul 9, 2026, 07:52 PM
Package URL
pkg:socket/skills-sh/hassancs91%2Fclaude-image-generation%2F3d-image-renderer%2F@6213d4aacf715a5335a2d470191d558fb5c477940800d1ef29726a852b51137f