tzai-product
Warn
Audited by Socket on Aug 13, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose is coherent for an image-generation hub, but the skill’s main action is to locate and execute a separate engine and, if missing, install another skill. That transitive dependency and hidden downstream credential/data flow raise medium risk even though no direct malicious behavior is shown here.
Confidence: 79%Severity: 56%
Audit Metadata