skills/whytryharder/skills/ai-product-photography/Socket

ai-product-photography

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core purpose is coherent and data appears to flow to the official inference.sh platform, but the skill expands trust through external CLI installation, wildcard CLI permissions, and explicit transitive skill installation. This looks more like medium supply-chain and trust-boundary risk than confirmed malicious behavior.

Confidence: 84%Severity: 58%

Audit Metadata

Analyzed At

Aug 6, 2026, 05:03 AM

Package URL

pkg:socket/skills-sh/whytryharder%2Fskills%2Fai-product-photography%2F@cd283d9ee56b321c856ab9a83da6b48bafc0da0cf22bf624662deea600b9d606