tzai-cover

Warn

Audited by Socket on Aug 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the wrapper’s stated purpose is coherent, but it depends on and instructs installation of another skill that handles the real execution, API access, and credentials. The main risk is transitive trust and unverifiable downstream data flow, not confirmed malicious behavior in this file.

Confidence: 81%Severity: 68%
Audit Metadata
Analyzed At
Aug 13, 2026, 02:22 AM
Package URL
pkg:socket/skills-sh/kedoupi%2Ftzai-image-skill%2Ftzai-cover%2F@2360453413dbf5357957e677bee8fe248a3b953ce828e39214f47a2da1d2adad
Security Audit — socket — tzai-cover