skills/magentosh/skills/ai-product-photography/Socket

ai-product-photography

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core purpose is coherent with image generation, but the skill expands trust by requiring a separate CLI skill, using broad Bash permissions, and encouraging further skill installations. I see medium supply-chain and transitive-trust risk rather than confirmed malicious behavior.

Confidence: 82%Severity: 58%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:06 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Fai-product-photography%2F@1d4741eb6ea0bd074c2a3d9c79196c8a83940f206b7150a42c80b85d33347085