background-removal

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated purpose is plausible, but the skill’s footprint relies on transitive skill installation, an external CLI login flow, and owner/provenance ambiguity (`belt-sh/cli` vs `inference-sh/skills`). Remote image processing is expected for this use case, yet the install and credential-routing model is broader and less trustworthy than a tightly scoped direct integration.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Aug 6, 2026, 05:03 AM
Package URL
pkg:socket/skills-sh/whytryharder%2Fskills%2Fbackground-removal%2F@26e320c44ea50171586a31236a4aee2cc70ed6cb3bab96a22ff8c8c2079b7278
Security Audit — socket — background-removal