image-convert-api

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core API-key handling and direct calls to Pixazo-owned endpoints are broadly consistent with a normal vendor API skill, but the skill contains notable internal inconsistencies about what the Image Converter API does and how its responses work, plus an unrelated wildcard transitive skill-install instruction. This is not confirmed malware, but it is not fully coherent or tightly scoped.

Confidence: 91%Severity: 52%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:03 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fimage-convert-api%2F@f7587566bf5d1646839add8ead58af934aa701c2de8397254c665fa9fa6af102