muse-image
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core image-generation purpose mostly matches the behavior, but the skill routes credentials and content through Pixazo rather than a direct Meta API, uses raw local key-file handling, contains a factual mismatch with Pixazo's async docs, and adds unnecessary transitive trust via wildcard skill installation. Not confirmed malware, but medium security risk due to third-party gateway credential flow and the unrelated skill-install instruction.
Confidence: 89%Severity: 64%
Audit Metadata