fal-ai-media

Warn

Audited by Socket on Sep 10, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The stated media-generation purpose is plausible, but the actual integration path is not aligned with fal.ai's official MCP setup. The main risk is credential forwarding to an unpinned third-party npm package (`fal-ai-mcp-server`) that is not evidenced as an official fal.ai distribution. Data flows to official APIs are otherwise coherent, but this install/execution trust break is significant.

Confidence: 93%Severity: 82%
Audit Metadata
Analyzed At
Sep 10, 2026, 08:43 PM
Package URL
pkg:socket/skills-sh/affaan-m%2Fecc%2Ffal-ai-media%2F@438d9c7e8dce772c0fe8559e47d32033614336c657dc9d9a09b0831e86d0a220
Security Audit — socket — fal-ai-media