dynapictures
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill is broadly coherent as a Membrane-based DynaPictures integration, and the CLI install source appears official. The main concern is data-flow integrity: instead of direct DynaPictures API use, the skill routes authentication and API access through Membrane as an intermediary, increasing trust and credential-handling scope beyond the target SaaS alone. This looks more like a high-trust third-party gateway than malware, with moderate security risk but no strong signs of overtly malicious intent.
Confidence: 85%Severity: 56%
Audit Metadata