lov-image-creator
Warn
Audited by Socket on Oct 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's core image/design purpose is plausible, and its package installs look like normal developer tooling, but the main data flow is routed through ZenMux rather than official Google endpoints. That third-party gateway requirement, combined with unverifiable bundled script behavior and dependency/version inconsistencies, makes the skill internally inconsistent enough to warrant caution rather than benign classification.
Confidence: 87%Severity: 69%
Audit Metadata