skills/vm0-ai/vm0-skills/lovart/Socket

lovart

Warn

Audited by Socket on Sep 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The core Lovart API usage is coherent and routes data to official Lovart endpoints, but the troubleshooting path introduces an unrelated, insufficiently verified `okou` CLI. That third-party execution path is disproportionate to a simple API guide and raises the overall risk despite otherwise legitimate API documentation.

Confidence: 90%Severity: 72%

Audit Metadata

Analyzed At

Sep 17, 2026, 01:24 AM

Package URL

pkg:socket/skills-sh/vm0-ai%2Fvm0-skills%2Flovart%2F@ca402175a6c6545fa1fbc390f739653cc30733d2b50c5a312ec21ed65e2a3710