image-recognition

Warn

Audited by Socket on Sep 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core OCR and image-analysis capabilities are mostly aligned with the stated purpose, but the skill broadens scope by collecting multiple API keys, recommending a self-hosted proxy, and routing some model traffic through that proxy. This looks more like a high-trust operations guide than a minimal image-recognition skill; not confirmed malware, but medium security risk.

Confidence: 85%Severity: 58%
Audit Metadata
Analyzed At
Sep 1, 2026, 06:00 AM
Package URL
pkg:socket/skills-sh/kekewater%2Fhermes-skills%2Fimage-recognition%2F@04436fd0a59669305682f1fbbcf80c512855e2cb03d0ac808a0a1387d7b60959