image-studio
Warn
Audited by Socket on Jul 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's stated image-routing purpose is coherent, but its actual execution depends on unverifiable local Python wrappers and related skills with no provenance, install source, or release verification. There is no direct evidence of malware or credential theft in the visible text, but the opaque wrapper-based execution path creates high supply-chain risk disproportionate to the transparency provided.
Confidence: 82%Severity: 72%
Audit Metadata