image-gen-blockeden-gemini
Warn
Audited by Socket on Mar 17, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's image-generation behavior fits its stated purpose, but its core data flow goes through a third-party BlockEden proxy rather than Google's official Gemini API. Scope is otherwise narrow and there is no strong malware or installer abuse signal, but prompts, images, and API credentials all depend on an intermediary service.
Confidence: 85%Severity: 58%
Audit Metadata