skills/huangwb8/skills/auto-draw-plot/Socket

auto-draw-plot

Warn

Audited by Socket on Jul 19, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill's main workflow is coherent for image generation, but it reads local credential files and sends requests through a non-official benszresearch.com/Sub2API gateway rather than the documented OpenAI API. That third-party credential and data routing is disproportionate enough to make the skill high risk even without obvious malware or installer abuse.

Confidence: 89%Severity: 74%

Audit Metadata

Analyzed At

Jul 19, 2026, 03:22 AM

Package URL

pkg:socket/skills-sh/huangwb8%2Fskills%2Fauto-draw-plot%2F@7aa74fde6bda13b58993810a34e1ad4cccc0d63ca2f05fd8e322e4037bfc1e76