skills/jjenkins/agent-image-skills/generate-key/Socket

generate-key

Warn

Audited by Socket on Mar 20, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the alias is small and its purpose matches API-key generation, but its real behavior is opaque because it wholly depends on an unprovided `image-key` skill. Direct first-party Lab Nocturne API use looks internally consistent, yet the transitive skill dependency and unpinned skills-install path raise medium trust and credential-handling risk.

Confidence: 83%Severity: 56%

Audit Metadata

Analyzed At

Mar 20, 2026, 12:30 AM

Package URL

pkg:socket/skills-sh/jjenkins%2Fagent-image-skills%2Fgenerate-key%2F@f355ea953c19a112fda1451080e7867d530d9053