skills/kedoupi/tzai-image-skill/tzai-marketing/Socket

tzai-marketing

Warn

Audited by Socket on Aug 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the hub's stated purpose matches marketing image generation, but its actual functionality is mostly delegation to a separate engine skill and installation path. The main concern is transitive trust and opaque downstream handling of TZAI_API_KEY, not confirmed malicious behavior in this file alone.

Confidence: 80%Severity: 55%

Audit Metadata

Analyzed At

Aug 13, 2026, 02:22 AM

Package URL

pkg:socket/skills-sh/kedoupi%2Ftzai-image-skill%2Ftzai-marketing%2F@31fdab8728a2e236f9239eca106f7cdbfee365ad439a26f8522ea6f26504977e