skills/kedoupi/tzai-image-skill/tzai-icon/Socket

tzai-icon

Warn

Audited by Socket on Aug 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

The skill's stated purpose matches its visible behavior, but it is mostly a launcher for another skill and asks to install that dependency dynamically. Risk is driven by transitive installation and opaque execution of the external tzai-image engine, not by confirmed malicious behavior in this wrapper.

Confidence: 82%Severity: 57%

Audit Metadata

Analyzed At

Aug 13, 2026, 02:22 AM

Package URL

pkg:socket/skills-sh/kedoupi%2Ftzai-image-skill%2Ftzai-icon%2F@85fb78c5b00d43433d9a569c26da9a89f65653cb22d36ecd99daf8360c5bed4a