skills/inference-sh/skills/product-photography/Socket

product-photography

Warn

Audited by Socket on May 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core image-generation behavior is consistent with the stated product-photography purpose, but the skill expands trust by instructing the agent to install other skills and rely on an external CLI with login and remote uploads. The main concern is transitive trust and broad `belt` command execution, not confirmed malicious behavior.

Confidence: 81%Severity: 62%

Audit Metadata

Analyzed At

May 19, 2026, 07:48 AM

Package URL

pkg:socket/skills-sh/inference-sh%2Fskills%2Fproduct-photography%2F@9c6dbde24dac94c01f965ba7ce2bf7b9e84ea82b