amazon-white-background

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The image-editing and compliance-checking scope is mostly coherent, but the skill’s network paths are not: it steers generation and browser use through unverified third-party domains (`tryallapi.com`, `gptimage2.asia`, `chatgpt-plus.top`) instead of keeping data with official OpenAI endpoints. That makes the credential and product-image exposure disproportionate to the stated purpose, even though the local Python verification step itself looks benign.

Confidence: 90%Severity: 76%
Audit Metadata
Analyzed At
Oct 4, 2026, 12:10 PM
Package URL
pkg:socket/skills-sh/xianyu110%2Fecommerce-image-skills%2Famazon-white-background%2F@5e5727a6d4d25340d87d9bb3948bb7b3406356e484754a0a31418948f7136757