animated-spritesheets

Warn

Audited by Socket on Sep 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's local image-processing behavior fits its stated purpose, and the fal.ai model endpoint is consistent with image generation, but the happy-path workflow depends on an undocumented, unverifiable vg CLI that likely receives API credentials and user asset data. That unresolved third-party CLI trust gap is disproportionate enough to raise the overall risk despite otherwise coherent functionality.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Sep 28, 2026, 12:18 PM
Package URL
pkg:socket/skills-sh/kyh%2Fvibedgames-plugins%2Fanimated-spritesheets%2F@baf542917d4c24550cfcaa8dfb19dc16854346f7eb0289a0e40f06e639f4881d