ai-image-generation

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's image-generation purpose matches its capabilities, but it depends on transitive skill installation, a broad external CLI, and inconsistent publisher/install paths (`belt-sh`, `inference.sh`, `inference-sh`). This looks more like a platform wrapper than direct model integration; risk is mainly supply-chain and credential-forwarding trust rather than confirmed malicious behavior.

Confidence: 81%Severity: 64%
Audit Metadata
Analyzed At
Jul 23, 2026, 06:06 PM
Package URL
pkg:socket/skills-sh/magentosh%2Fskills%2Fai-image-generation%2F@f11f3a5fc9193977f477c4df7e2f24bdd7ffaee06942af03fac53889bf621800
Security Audit — socket — ai-image-generation