skills/kedoupi/tzai-image-skill/tzai-logo/Socket

tzai-logo

Warn

Audited by Socket on Aug 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the visible wrapper is purpose-aligned for logo generation, but it is not self-contained and pushes trust to an unreviewed companion skill installed via npx. Main risk is transitive skill installation plus opaque downstream credential and network handling, not confirmed malicious behavior in this file.

Confidence: 79%Severity: 64%

Audit Metadata

Analyzed At

Aug 13, 2026, 02:22 AM

Package URL

pkg:socket/skills-sh/kedoupi%2Ftzai-image-skill%2Ftzai-logo%2F@48140c6f40409035b91c85c82d676179b0798bcf6bddd3adfd5d2604b6674763