sn-da-image-caption

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s overall purpose and local file scope are coherent for image analysis, but there are meaningful trust and data-flow gaps. The main concerns are inconsistent API-key claims, inability to inspect caption.py directly, and support for arbitrary base URL overrides that could forward images and credentials to third-party endpoints.

Confidence: 79%Severity: 53%
Audit Metadata
Analyzed At
Sep 21, 2026, 08:38 AM
Package URL
pkg:socket/skills-sh/opensensenova%2Fsensenova-skills%2Fsn-da-image-caption%2F@2c35cf03a397c3d159dad9483917f332e2e1b57efe991d1214a95b1fec5bd9b5
Security Audit — socket — sn-da-image-caption