fal-ai-media
Warn
Audited by Socket on Sep 10, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated media-generation purpose is plausible, but the actual integration path is not aligned with fal.ai's official MCP setup. The main risk is credential forwarding to an unpinned third-party npm package (`fal-ai-mcp-server`) that is not evidenced as an official fal.ai distribution. Data flows to official APIs are otherwise coherent, but this install/execution trust break is significant.
Confidence: 93%Severity: 82%
Audit Metadata