skills/kedoupi/tzai-image-skill/tzai-brand/Socket

tzai-brand

Warn

Audited by Socket on Aug 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's stated purpose is coherent, but it mainly acts as a launcher for another skill and a local executable whose provenance and API data flows are not visible here. The transitive skill installation and hidden credential/network handling make this medium risk even without direct evidence of malicious behavior in this fragment.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Aug 13, 2026, 02:22 AM

Package URL

pkg:socket/skills-sh/kedoupi%2Ftzai-image-skill%2Ftzai-brand%2F@51edb929f0a65239cec53a8a11227a6e0bbc335097d8e0e984662ace37948dc9