draw-image

Warn

Audited by Socket on Sep 3, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the core OpenAI API usage is coherent and proportionate, but the skill asks users to execute an unverifiable local bootstrap script with no public provenance. That unresolved install-trust issue is significant enough to make the skill high risk despite otherwise normal credential scope and official OpenAI data flows.

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
Sep 3, 2026, 06:07 AM
Package URL
pkg:socket/skills-sh/jj66-git%2Fmathmodeling-skills_jj%2Fdraw-image%2F@96a0dad8f90b6bcf2429249b3d5c0efe7e83f9461f0dfbc0c597d41aa1d2153e