background-removal
Warn
Audited by Socket on Aug 6, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is plausible, but the skill’s footprint relies on transitive skill installation, an external CLI login flow, and owner/provenance ambiguity (`belt-sh/cli` vs `inference-sh/skills`). Remote image processing is expected for this use case, yet the install and credential-routing model is broader and less trustworthy than a tightly scoped direct integration.
Confidence: 84%Severity: 72%
Audit Metadata