skills/pixazo-ai/skills/pika/Socket

pika

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core API use is coherent for a Pixazo-hosted Pika gateway skill, and the domains/endpoints appear internally consistent with Pixazo documentation. Risk comes from routing a Pika-branded workflow through a third-party gateway, persisting the API key in a local plaintext file, and the wildcard transitive skill-install instruction.

Confidence: 91%Severity: 52%

Audit Metadata

Analyzed At

Sep 22, 2026, 09:04 PM

Package URL

pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fpika%2F@d9462ae0dcf6529417523ce3e9279c3f068cc9410b7d22ca184b646242e4ba68