create-bianzu-image
Warn
Audited by Socket on Oct 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s capabilities mostly match its stated purpose of creating edited portrait images and a shareable local HTML page, and it does not seek credentials or route data to unrelated endpoints. The main concern is install trust: it asks the agent to install a third-party skill from a personal GitHub repo through a transitive CLI workflow, which expands trust without strong provenance guarantees. Data handling is otherwise proportionate to the image-editing purpose.
Confidence: 89%Severity: 56%
Audit Metadata