seo-image-gen

Warn

Audited by Socket on Jul 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill's stated purpose matches its image-generation behavior, and there is no clear evidence of malware or hidden exfiltration logic in this file. The main issue is install and data-flow trust: the skill relies on an external Banana/nanobanana MCP extension installed via a local script, while the exact upstream package/binary provenance is ambiguous and likely forwards API credentials/data through third-party code. That makes the skill coherent but materially risky.

Confidence: 82%Severity: 72%
Audit Metadata
Analyzed At
Jul 21, 2026, 09:15 AM
Package URL
pkg:socket/skills-sh/ztemerbekov%2Fa1-seo-skills%2Fseo-image-gen%2F@4d2aff1a908856381e78b882bde7b280c91366efd4562f009a38029ce7366775
Security Audit — socket — seo-image-gen