skills/jjyaoao/helloagents/image-generation/Socket

image-generation

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s capabilities fit image generation, and there is no evident hidden exfiltration or command execution. However, trust in the z-ai ecosystem is only partially verifiable: package/CLI provenance is ambiguous, versions are unpinned, and SDK docs allow configurable API endpoints, creating moderate supply-chain and data-routing risk.

Confidence: 84%Severity: 52%

Audit Metadata

Analyzed At

Oct 16, 2026, 11:52 PM

Package URL

pkg:socket/skills-sh/jjyaoao%2Fhelloagents%2Fimage-generation%2F@025af24a84788bf9959b4eda4fac25e509e2fd3d667c16ea94320759318cd785