skills/kedoupi/tzai-image-skill/tzai-photo/Socket

tzai-photo

Warn

Audited by Socket on Aug 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent for an image-generation hub, but the real functionality is outsourced to another installable skill and local executable. The main concerns are transitive skill installation, opaque downstream credential/API handling, and delegated execution trust rather than confirmed malicious behavior in this file.

Confidence: 84%Severity: 64%

Audit Metadata

Analyzed At

Aug 13, 2026, 02:22 AM

Package URL

pkg:socket/skills-sh/kedoupi%2Ftzai-image-skill%2Ftzai-photo%2F@b54086d10a8e4c206e2ce91cd60263b93394e9a2f3131a87598094b1f23a6c32