grok-imagine-image

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core image-generation function is coherent, but the skill is misleadingly branded as xAI/Grok while routing credentials and user content through Pixazo's third-party gateway, stores the key persistently in a local file, and includes unrelated transitive skill-install instructions. No confirmed malware or payload execution is present, but the data flow and trust boundaries are broader than the stated purpose implies.

Confidence: 91%Severity: 62%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:03 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fgrok-imagine-image%2F@931b5fb01668f422bcc24592ef3cd7b21b4dca47fb716fb94d9d10e386f857fc