ai-image-generation

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core image-generation purpose matches the commands, but the trust chain is broader than necessary. Main concerns are transitive skill installation and an unclear belt-sh/cli publisher relationship versus the otherwise same-org inference.sh/inference-sh sources; this is more a supply-chain and trust issue than confirmed malicious behavior.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
Aug 6, 2026, 05:03 AM
Package URL
pkg:socket/skills-sh/whytryharder%2Fskills%2Fai-image-generation%2F@cdbf923c0fb092bfde671fdda32c8752fe7819965cbc9c1e719e25e573a5f13d
Security Audit — socket — ai-image-generation