skills/inference-sh-8/skills/ai-image-generation/Socket

ai-image-generation

Warn

Audited by Socket on Apr 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill's purpose is coherent, but it routes all activity through the external `infsh` CLI and inference.sh platform, uses mutable remote installer patterns, and encourages transitive skill installation. This is not clearly malicious, yet the intermediary data flow and external CLI trust boundary make it medium risk rather than benign.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Apr 15, 2026, 01:59 PM

Package URL

pkg:socket/skills-sh/inference-sh-8%2Fskills%2Fai-image-generation%2F@db5a1c17b861dffdf2f9b08e5d69f2acd3b8824d