scenario-gpt-image

Warn

Audited by Socket on Aug 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core image-generation guidance is coherent with Scenario/OpenAI use, and data flows look aligned with official Scenario MCP usage. The main concern is the explicit transitive installation of sibling skills via `npx skills add`, which extends trust to additional remote skill content; this is a medium security risk but not confirmed malicious behavior.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Aug 24, 2026, 08:22 AM
Package URL
pkg:socket/skills-sh/scenario-labs%2Fskills%2Fscenario-gpt-image%2F@c324d5d0fabe46034ff987becf8687adcad5a902821ab0f735b74ac7be7e7d67
Security Audit — socket — scenario-gpt-image