skills/michailbul/laniameda-skills/ai-typography/Socket

ai-typography

Warn

Audited by Socket on Apr 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated typography purpose is plausible, but the skill's core capability is mostly a wrapper around an unverified third-party nano-banana-pro dependency with weak provenance and likely credential/API mediation. The local specimen generation is benign, but the external generator introduces disproportionate supply-chain and credential-flow risk.

Confidence: 84%Severity: 82%

Audit Metadata

Analyzed At

Apr 17, 2026, 10:30 AM

Package URL

pkg:socket/skills-sh/Michailbul%2Flaniameda-skills%2Fai-typography%2F@9e89824df52c21ef5d5512ad3287f77c52725d82