space-gemini-article-illustration

Warn

Audited by Socket on Jul 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该技能的核心能力与“文章批量配图”目的基本一致,外部网络仅指向 Google 官方 Gemini API,整体不像恶意窃密技能。但它把 API key 明文传给未展示源码的本地脚本,并自动改写本地文档与图片目录,存在中等安全风险,应视为可疑但非恶意。

Confidence: 86%Severity: 62%
Audit Metadata
Analyzed At
Jul 4, 2026, 11:01 AM
Package URL
pkg:socket/skills-sh/SpaceZephyr%2Fdesign-buddy%2Fspace-gemini-article-illustration%2F@1324a66c4abfb99f8074087b86a78ed32c47dbbeeb1dd69d5dd02bde2deff45b
Security Audit — socket — space-gemini-article-illustration