create-bianzu-image

Warn

Audited by Socket on Oct 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s capabilities mostly match its stated purpose of creating edited portrait images and a shareable local HTML page, and it does not seek credentials or route data to unrelated endpoints. The main concern is install trust: it asks the agent to install a third-party skill from a personal GitHub repo through a transitive CLI workflow, which expands trust without strong provenance guarantees. Data handling is otherwise proportionate to the image-editing purpose.

Confidence: 89%Severity: 56%
Audit Metadata
Analyzed At
Oct 28, 2026, 02:46 PM
Package URL
pkg:socket/skills-sh/makerjackie%2Fbianzu%2Fcreate-bianzu-image%2F@cd54e9e0b7f54ba53e385ed927ed89aabfdaf509ffdd9a45b8c626fab239b482