muapi-nano-banana

Warn

Audited by Socket on Sep 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill's stated image-generation purpose is plausible, but its real execution path depends on an unverifiable local shell script and routes prompts/likely credentials to a third-party Muapi gateway while being branded in Google/Gemini terms. The main risk is trust and credential/data forwarding, not confirmed malware.

Confidence: 84%Severity: 76%
Audit Metadata
Analyzed At
Sep 30, 2026, 07:17 AM
Package URL
pkg:socket/skills-sh/anil-matcha%2Fgenerative-media-skills%2Fmuapi-nano-banana%2F@7551cf5325f6d95471d38c81697c1913c7d248a7703821e41e4953a9340b2db2