flux

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core API workflow is coherent for a Pixazo integration and does not show malware-like download-execute behavior, but the skill materially misstates the official Flux Pro VTO request/response flow and sends credentials/data through Pixazo as a gateway rather than directly to Black Forest Labs. The wildcard transitive skill-install suggestion further broadens trust beyond the stated purpose.

Confidence: 90%Severity: 56%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:03 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fflux%2F@742a819765429992f8c76af3bcc32573bf52477c08b2772061945eed4b57e939