image-studio

Warn

Audited by Socket on Oct 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose matches image generation, but the default architecture routes all usage through a third-party hosted proxy on a free-hosting domain, with optional token forwarding and no reviewable code here to verify handling. That makes the skill's trust and data-flow model riskier than its 'zero setup' framing suggests.

Confidence: 88%Severity: 76%
Audit Metadata
Analyzed At
Oct 16, 2026, 06:25 AM
Package URL
pkg:socket/skills-sh/wells1137%2Fmedia-skills%2Fimage-studio%2F@846a9702357fa2fa82da3fa88a63268a73c29c7589376637f3dba7106d5db33b