image-convert-api
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core API-key handling and direct calls to Pixazo-owned endpoints are broadly consistent with a normal vendor API skill, but the skill contains notable internal inconsistencies about what the Image Converter API does and how its responses work, plus an unrelated wildcard transitive skill-install instruction. This is not confirmed malware, but it is not fully coherent or tightly scoped.
Confidence: 91%Severity: 52%
Audit Metadata