skills/redfox-data/redfox-community/image-gen/Socket

image-gen

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s basic image-generation purpose is coherent, and its dependency footprint is small, but its credential and data flow are not aligned with the OpenAI-branded claim. It sends API keys and user images to a third-party service (redfox.hk) instead of official OpenAI endpoints, making this a gateway/intermediary pattern with medium-high security risk.

Confidence: 88%Severity: 74%

Audit Metadata

Analyzed At

Aug 24, 2026, 06:07 PM

Package URL

pkg:socket/skills-sh/redfox-data%2Fredfox-community%2Fimage-gen%2F@62b065a06dc2459a69af6da18caab112301e6cacfed6dd3a218d186a2df6c0e8