skills/skills-101/superpowers/qwen-image-2-pro/Socket

qwen-image-2-pro

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but it relies on transitive skill installation and a third-party CLI/service path with partial publisher ambiguity. Data flows are plausible for hosted image generation, yet the extra trust layers and wildcard CLI permission make the footprint broader than a simple model wrapper.

Confidence: 84%Severity: 68%

Audit Metadata

Analyzed At

Aug 17, 2026, 04:09 PM

Package URL

pkg:socket/skills-sh/skills-101%2Fsuperpowers%2Fqwen-image-2-pro%2F@0c65187cb131fff6993c150db5f95ab87495d43f