nucleus
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The main API behavior is mostly coherent for an image-generation skill and uses Pixazo-owned domains, but the skill routes all model access through a gateway intermediary, stores raw API keys locally, contains documentation inconsistent with current vendor behavior, and includes a transitive wildcard skill-install instruction with unverified repo provenance. Core functionality appears legitimate, but trust and scope are broader than the model-specific branding suggests.
Confidence: 89%Severity: 58%
Audit Metadata