ai-image-generation
Warn
Audited by Socket on Aug 6, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core image-generation purpose matches the commands, but the trust chain is broader than necessary. Main concerns are transitive skill installation and an unclear belt-sh/cli publisher relationship versus the otherwise same-org inference.sh/inference-sh sources; this is more a supply-chain and trust issue than confirmed malicious behavior.
Confidence: 86%Severity: 58%
Audit Metadata