muse-image

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core image-generation purpose mostly matches the behavior, but the skill routes credentials and content through Pixazo rather than a direct Meta API, uses raw local key-file handling, contains a factual mismatch with Pixazo's async docs, and adds unnecessary transitive trust via wildcard skill installation. Not confirmed malware, but medium security risk due to third-party gateway credential flow and the unrelated skill-install instruction.

Confidence: 89%Severity: 64%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:04 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fmuse-image%2F@db69b3ff00c9bacb790dcd12d8a60f499346c0d8ba017fb15ad87d27660a36a2