exploring-image

Warn

Audited by Socket on Oct 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose and capabilities are largely coherent for pixel-based GUI automation, and no obvious malicious exfiltration path is described. However, it requires an exact external local server/binary (robomotion-image-mcp) whose public provenance is not independently verifiable from the provided evidence, and it grants an agent the ability to act on live remote sessions with potentially irreversible effects.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Oct 5, 2026, 11:27 AM
Package URL
pkg:socket/skills-sh/robomotionio%2Fagent-skills%2Fexploring-image%2F@4240438e358a92604caa777bb0b792772bfcfbe499d17d13f423fa55b09af997