skills/xianyu110/brand-ip-kit-skills/sticker-pack/Socket

sticker-pack

Warn

Audited by Socket on Nov 4, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core sticker-pack workflow is benign and well-scoped, but the optional 'OpenAI-compatible gateway' path weakens data-flow integrity by routing prompts, reference images, and API keys through a third-party endpoint such as tryallapi.com rather than the official OpenAI API. No strong malware indicators or malicious execution chain are present.

Confidence: 89%Severity: 58%

Audit Metadata

Analyzed At

Nov 4, 2026, 07:55 AM

Package URL

pkg:socket/skills-sh/xianyu110%2Fbrand-ip-kit-skills%2Fsticker-pack%2F@69ed1e4dda8bb3a651219a02e05702e90c5aa440f8e7e61cd06002fcad75c646