pixelcut

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core API workflow is coherent for a Pixazo integration, but the skill is internally inconsistent in branding and scope. It presents itself as 'Pixelcut' while actually routing credentials and requests through Pixazo's gateway, persists raw API keys locally, and recommends wildcard installation of additional skills. This is not confirmed malware, but the gateway indirection and transitive trust make the skill higher risk than a direct official Pixelcut API skill.

Confidence: 89%Severity: 56%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:04 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fpixelcut%2F@c0177ec65f5d9cb708bf4a5680c284b4c1e00d8852067bd3cc0aa6fc15b6b073