hidream

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: core API use is mostly coherent with the stated purpose and appears to use Pixazo-owned endpoints, but the skill has notable integrity issues. It stores raw API keys locally, routes a HiDream-branded workflow through a third-party gateway, misstates the official async response model, and includes a transitive wildcard skill-install instruction that exceeds the skill’s purpose.

Confidence: 92%Severity: 58%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:03 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fhidream%2F@3741ce219ef4a49332736c4587a0966868aadbca918b6aa3e657d824390c120c