skills/kedoupi/tzai-image-skill/tzai-social/Socket

tzai-social

Warn

Audited by Socket on Aug 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is coherent, but the skill is mainly a router that depends on a separately installed third-party skill from a personal repo and likely forwards TZAI_API_KEY through that engine. No direct malicious behavior is shown here, but the transitive install and delegated credential/data flow make it medium risk.

Confidence: 84%Severity: 61%

Audit Metadata

Analyzed At

Aug 13, 2026, 02:22 AM

Package URL

pkg:socket/skills-sh/kedoupi%2Ftzai-image-skill%2Ftzai-social%2F@0490d001936eacbf4cd2c6c05272a91ff10419f63bd7e2e5d26b629bd2ae8912