skills/hosseinmirzapur/opencode-skills/fal-train/Socket

fal-train

Warn

Audited by Socket on Aug 26, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the file itself is a low-function catalog entry, but it instructs transitive installation of an upstream skill bundle and points toward an official yet remote-script-installed CLI that can receive API credentials. Same-org provenance argues against malware, but the trust chain and credential forwarding make the overall skill risk medium.

Confidence: 88%Severity: 58%

Audit Metadata

Analyzed At

Aug 26, 2026, 05:56 PM

Package URL

pkg:socket/skills-sh/hosseinmirzapur%2Fopencode-skills%2Ffal-train%2F@662068b2c8e8153e8c77dfd3f7f0e89cd2c842191e92ad62e45693db02ecd260