fal-realtime

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: this catalog skill is mostly benign as a pointer, but it expands trust to an upstream bundle and official-yet-remote installer flow that can receive API credentials. The capability matches the stated image-generation purpose, but the transitive installation and pipe-to-shell setup make the overall risk medium rather than low.

Confidence: 84%Severity: 53%
Audit Metadata
Analyzed At
Aug 26, 2026, 05:56 PM
Package URL
pkg:socket/skills-sh/hosseinmirzapur%2Fopencode-skills%2Ffal-realtime%2F@32ebe1b494d4f89854d886fbaa53d6e931f06a9fe9f8774e7518ce6110c6b1d8
Security Audit — socket — fal-realtime