skills/infrasity-labs/dev-gtm-claude-skills/blog-image/Socket

blog-image

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

BENIGN with medium supply-chain risk. The skill's capabilities, credentials, and file access are largely aligned with blog image generation, but it requires trusting a third-party MCP package executed via npx and forwarding a Google API key into that process rather than calling official APIs directly.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 13, 2026, 08:44 AM

Package URL

pkg:socket/skills-sh/infrasity-labs%2Fdev-gtm-claude-skills%2Fblog-image%2F@14d4ef47ed555081ded2144d7ea81fe17e946c4aac118692c73a9bd0605fef6d