muapi-photo-pack-generator

Warn

Audited by Socket on Sep 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's core capability matches its stated purpose, but execution and data flow are under-specified: it invokes an unseen local script and recommends a non-canonical model alias without naming the actual provider or endpoint. That is not enough to call it malicious, but it is too opaque to classify as benign when handling sensitive face images.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
Sep 30, 2026, 07:17 AM
Package URL
pkg:socket/skills-sh/anil-matcha%2Fgenerative-media-skills%2Fmuapi-photo-pack-generator%2F@fa3a6187d7d1e4824ea8d3639e3f1f16fa17368a69e213f10b92e226ece0d381