nucleus

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The main API behavior is mostly coherent for an image-generation skill and uses Pixazo-owned domains, but the skill routes all model access through a gateway intermediary, stores raw API keys locally, contains documentation inconsistent with current vendor behavior, and includes a transitive wildcard skill-install instruction with unverified repo provenance. Core functionality appears legitimate, but trust and scope are broader than the model-specific branding suggests.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:04 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fnucleus%2F@acb2524035f3fd247d27e32f05540e08d108d7071196038e4876eb4b97a2c35c