draw-image
Warn
Audited by Socket on Sep 3, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the core OpenAI API usage is coherent and proportionate, but the skill asks users to execute an unverifiable local bootstrap script with no public provenance. That unresolved install-trust issue is significant enough to make the skill high risk despite otherwise normal credential scope and official OpenAI data flows.
Confidence: 87%Severity: 78%
Audit Metadata