animated-spritesheets
Warn
Audited by Socket on Oct 10, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's local image-processing behavior fits its stated purpose, and the fal.ai model endpoint is consistent with image generation, but the happy-path workflow depends on an undocumented, unverifiable vg CLI that likely receives API credentials and user asset data. That unresolved third-party CLI trust gap is disproportionate enough to raise the overall risk despite otherwise coherent functionality.
Confidence: 84%Severity: 82%
Audit Metadata