skills/whytryharder/skills/qwen-image-2-pro/Socket

qwen-image-2-pro

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but it relies on transitive skill installation and a third-party CLI/service path with partial publisher ambiguity. Data flows are plausible for hosted image generation, yet the extra trust layers and wildcard CLI permission make the footprint broader than a simple model wrapper.

Confidence: 84%Severity: 68%

Audit Metadata

Analyzed At

Aug 6, 2026, 05:03 AM

Package URL

pkg:socket/skills-sh/whytryharder%2Fskills%2Fqwen-image-2-pro%2F@931e5655c92c075356b114fad2345cac6b5f13febd915986fda10c24280b110e