image-dpi-api

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core API flow is mostly coherent and uses same-org Pixazo endpoints, but the skill is internally inconsistent about what the endpoint does, stores/reads raw API keys from disk, routes all work through Pixazo's gateway, and includes a wildcard transitive skill-install command unrelated to the specific task. This is not confirmed malware, but it is broader and less well-scoped than a simple Image DPI integration should be.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:04 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fimage-dpi-api%2F@4d7095e78eab659c2329b8c72c27d679415ba6d81f1290b72bd84dd15a759e57