skills/magentosh/skills/qwen-image-2/Socket

qwen-image-2

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s purpose is coherent, and data flows mostly match a hosted image-generation integration, but it expands trust by installing another skill (`belt-sh/cli`) and depends on an external CLI for core function. This is more of a transitive trust and supply-chain concern than confirmed malicious behavior.

Confidence: 84%Severity: 62%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:05 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Fqwen-image-2%2F@dcd5cd6a6e4708a705977c06fe4a7bd0fa1d6cd05cec521b6290be0090c8f188