skills/therichardngai-code/gpt-image-2-pro-max/media-tools/Socket

media-tools

Warn

Audited by Socket on May 5, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is mostly aligned with its stated media-generation/vision purpose, but it has moderate risk due to direct reading of a local OAuth credential file, multi-provider credential forwarding, OpenRouter aggregation, and user-configurable API-base redirection. No strong signs of malware or hidden execution are present in the provided content.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

May 5, 2026, 05:51 PM

Package URL

pkg:socket/skills-sh/therichardngai-code%2Fgpt-image-2-pro-max%2Fmedia-tools%2F@10d7f026deee62cdb3a48434caac194b28f1d813