pixelcut
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core API workflow is coherent for a Pixazo integration, but the skill is internally inconsistent in branding and scope. It presents itself as 'Pixelcut' while actually routing credentials and requests through Pixazo's gateway, persists raw API keys locally, and recommends wildcard installation of additional skills. This is not confirmed malware, but the gateway indirection and transitive trust make the skill higher risk than a direct official Pixelcut API skill.
Confidence: 89%Severity: 56%
Audit Metadata