packaging-design

Warn

Audited by Socket on Oct 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core packaging-design purpose is benign and the requested inputs are proportionate, but the skill explicitly encourages routing API calls and keys through a third-party OpenAI-compatible gateway (including tryallapi.com) instead of official OpenAI endpoints. This creates unnecessary credential-forwarding and data-interception risk, though there is no evidence of hidden execution, malware payloads, or capabilities unrelated to packaging design.

Confidence: 90%Severity: 64%
Audit Metadata
Analyzed At
Oct 22, 2026, 07:40 AM
Package URL
pkg:socket/skills-sh/xianyu110%2Fbrand-ip-kit-skills%2Fpackaging-design%2F@bd462b5a7b24558c9925277f31a0b5427f8476c0fc71350c4a4e464dc3a16467