sale-banner

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s core purpose is coherent and credential scope is limited, but it unnecessarily routes prompts, product images, and potentially API-backed generation through unofficial third-party endpoints (tryallapi.com, gptimage2.asia, chatgpt-plus.top). That makes the data flow and execution trust weaker than expected for a benign image-design skill, though there is no confirmed malware or hidden payload behavior in the provided content.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Oct 4, 2026, 12:10 PM
Package URL
pkg:socket/skills-sh/xianyu110%2Fecommerce-image-skills%2Fsale-banner%2F@067a81ab69056ef9b9fa754db66c7de861c2164e8a7263908be30849363be739