skills/seaworld008/commonly-used-high-value-skills/gpt-image2/Socket

gpt-image2

Warn

Audited by Socket on Sep 8, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The core behavior fits an image-generation skill, but it reads raw Codex credential files and can forward those credentials, prompts, and reference images to arbitrary OpenAI-compatible base URLs rather than official APIs only. There is no strong malware signal or installer abuse, but data-flow integrity is weakened enough to treat the skill as medium-high risk.

Confidence: 89%Severity: 68%

Audit Metadata

Analyzed At

Sep 8, 2026, 06:59 AM

Package URL

pkg:socket/skills-sh/seaworld008%2Fcommonly-used-high-value-skills%2Fgpt-image2%2F@3a81366284b6b77adf8b6caca351cd39e4e8e6fccb47cfa628419d0161a47692