multi-angle-set

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core purpose is coherent, but the data flow is not: the skill recommends routing image prompts, references, and possibly API credentials through third-party intermediary domains (`tryallapi.com`, `gptimage2.asia`, `chatgpt-plus.top`) rather than official provider endpoints. The Pillow install is benign and proportionate, but the credential/data forwarding to non-official services makes the overall skill high risk.

Confidence: 92%Severity: 84%
Audit Metadata
Analyzed At
Oct 4, 2026, 12:10 PM
Package URL
pkg:socket/skills-sh/xianyu110%2Fecommerce-image-skills%2Fmulti-angle-set%2F@6431938e8add502c1c8c4ea1625c53c41c32e104265f0a4097144fa950367c8d