flux
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core API workflow is coherent for a Pixazo integration and does not show malware-like download-execute behavior, but the skill materially misstates the official Flux Pro VTO request/response flow and sends credentials/data through Pixazo as a gateway rather than directly to Black Forest Labs. The wildcard transitive skill-install suggestion further broadens trust beyond the stated purpose.
Confidence: 90%Severity: 56%
Audit Metadata