skills/magentosh/skills/p-image/Socket

p-image

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s image-generation purpose is coherent, but it expands trust by requiring installation of another skill and an external CLI, with mutable remote install documentation and broad `belt *` permissions. Data flows are mostly consistent with the stated service, so this looks more like medium supply-chain/transitive-trust risk than confirmed malicious behavior.

Confidence: 84%Severity: 63%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:06 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Fp-image%2F@efc456e41c5af0522eefceb9d8d5b4258114234f92963951bfe4f4e1dc314ab9