taobao-detail-long-image

Warn

Audited by Socket on Oct 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill’s stated purpose is benign and its local stitching workflow is proportionate, but its recommended data flows are not. The main risk is not image generation itself; it is steering prompts and potentially API credentials through third-party gateways and browser sites instead of official OpenAI endpoints, plus unpinned dependencies and transitive install guidance.

Confidence: 89%Severity: 66%
Audit Metadata
Analyzed At
Oct 4, 2026, 12:10 PM
Package URL
pkg:socket/skills-sh/xianyu110%2Fecommerce-image-skills%2Ftaobao-detail-long-image%2F@e138bc9bdf02e808b39f43cfe51d09db4e998bd37fbe22ea4a9065980d29b73a