skills/starchild-ai-agent/official-skills/image-portrait/Socket

image-portrait

Warn

Audited by Socket on Jul 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The core capability matches the stated portrait-generation purpose, and official fal.ai endpoints are consistent with that purpose. Risk comes from routing sensitive user photos and auth through an unverifiable sc-proxy intermediary, especially for children/family and ID-photo use cases; this is a data-flow and trust concern rather than confirmed malware.

Confidence: 86%Severity: 64%

Audit Metadata

Analyzed At

Jul 14, 2026, 04:58 PM

Package URL

pkg:socket/skills-sh/starchild-ai-agent%2Fofficial-skills%2Fimage-portrait%2F@b006630bb3f7c883e980087e6151f764406f4c9e569d3f95990d09a3d2ec53f2