tzai-architecture
Warn
Audited by Socket on Aug 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
The skill's stated purpose matches its behavior: it delegates architecture-image generation to a local tzai-image engine. Main concerns are transitive trust and supply-chain risk from requiring installation/execution of another skill and forwarding prompts/API credentials through an unreviewed underlying engine. This looks more suspicious-than-benign from a trust perspective, but not overtly malicious from the provided file alone.
Confidence: 78%Severity: 56%
Audit Metadata