skills/jshsakura/awesome-opencode-skills/visual-asset-generator/Socket

visual-asset-generator

Warn

Audited by Socket on Jun 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill depends on a third-party unverified CLI/MCP that forwards project-derived prompts to external model services with limited transparency. This looks more like supply-chain and data-flow risk than confirmed malware.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 15, 2026, 01:41 AM

Package URL

pkg:socket/skills-sh/jshsakura%2Fawesome-opencode-skills%2Fvisual-asset-generator%2F@ce87557b3a21ab9c5879fdae651ab0ff209d0d12a78218ebcb10df6e63d46ec7