animated-spritesheets

Warn

Audited by Socket on Oct 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's local image-processing behavior fits its stated purpose, and the fal.ai model endpoint is consistent with image generation, but the happy-path workflow depends on an undocumented, unverifiable vg CLI that likely receives API credentials and user asset data. That unresolved third-party CLI trust gap is disproportionate enough to raise the overall risk despite otherwise coherent functionality.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Oct 10, 2026, 07:45 PM
Package URL
pkg:socket/skills-sh/kyh%2Fvibedgames%2Fanimated-spritesheets%2F@e3151c9a01c529332721a5c0b8d9800eebc36e42c670c86621c2c76c7886f35b