mirelo

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the main network destination appears first-party Pixazo and there is no obvious malware, but the skill is internally inconsistent about what Mirelo SFX does, how responses work, and whether it is image or audio/video focused. It also persists raw API keys locally and includes an unnecessary wildcard transitive skill-install instruction, making the overall footprint broader and less coherent than the stated purpose.

Confidence: 91%Severity: 58%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:04 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fmirelo%2F@ddea5d535e34f71fcf85747877d209ec12371d12c367f48ba8c1d4c3c5f7add2