tzai-product

Warn

Audited by Socket on Aug 13, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose is coherent for an image-generation hub, but the skill’s main action is to locate and execute a separate engine and, if missing, install another skill. That transitive dependency and hidden downstream credential/data flow raise medium risk even though no direct malicious behavior is shown here.

Confidence: 79%Severity: 56%
Audit Metadata
Analyzed At
Aug 13, 2026, 02:20 AM
Package URL
pkg:socket/skills-sh/kedoupi%2Ftzai-image-skill%2Ftzai-product%2F@10c0d14e6bc5fe34977d0cb08bcb22b71355f55f7f528d89025612abf3903472
Security Audit — socket — tzai-product