ideogram

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core image-generation behavior is mostly coherent, but the skill is mislabeled as an Ideogram API integration while actually routing user data and credentials through Pixazo's intermediary gateway. The credential storage instructions and wildcard transitive skill install increase risk, though there is no evidence of malware or an unverified binary payload.

Confidence: 90%Severity: 56%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:03 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fideogram%2F@897fafd40b953e353f87c0d36a923eba2dd2a6b1f3349f594bf2b3c96c91011f