skills/inference-sh/skills/flux-image/Socket

flux-image

Warn

Audited by Socket on Sep 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the image-generation purpose is coherent, and the main network/data flows fit the claimed function, but the skill relies on transitive skill installation and a curl|sh installer path. Risk is driven more by delegated trust and scope expansion than by clear malicious behavior.

Confidence: 91%Severity: 58%

Audit Metadata

Analyzed At

Sep 18, 2026, 09:29 PM

Package URL

pkg:socket/skills-sh/inference-sh%2Fskills%2Fflux-image%2F@26a252400cceefcb2c81e31dec4b834809e3304073cdc9ee58e5672853989d20