skills/pixazo-ai/skills/mai-image/Socket

mai-image

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core image-generation behavior is coherent, but the skill is materially inconsistent in data flow and trust boundaries. It presents MAI Image as a Microsoft capability while routing prompts, images, and credentials through Pixazo's gateway, stores the API key in a local file, and includes a wildcard transitive-skill install instruction unrelated to the immediate task.

Confidence: 90%Severity: 64%

Audit Metadata

Analyzed At

Sep 22, 2026, 09:04 PM

Package URL

pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fmai-image%2F@06e336243c35d793671e9598a2915efc5ce2da5bff80cc89af0204c51f156e0f