fal-image

Warn

Audited by Socket on May 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the stated image-generation purpose is coherent, but the skill's actual footprint depends on a third-party CLI/proxy that intermediates authentication, prompts, and image uploads instead of calling fal directly. That indirect data flow and unverifiable CLI provenance make the trust model disproportionate for a simple API integration.

Confidence: 82%Severity: 76%
Audit Metadata
Analyzed At
May 16, 2026, 09:57 PM
Package URL
pkg:socket/skills-sh/kyh%2Fvibedgames%2Ffal-image%2F@8f0868f51e7094d62d21195b58a4cb793145c51c