skills/bytedance/deer-flow/image-generation/Socket

image-generation

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core behavior matches an image-generation skill, and there is no clear malware or installer abuse. The main risk is data-flow integrity: credentials and reference images are forwarded through an opaque local script, OpenAI-compatible mode allows arbitrary third-party endpoints, and the documented MiniMax host is inconsistent with official docs.

Confidence: 88%Severity: 57%

Audit Metadata

Analyzed At

Sep 15, 2026, 02:52 PM

Package URL

pkg:socket/skills-sh/bytedance%2Fdeer-flow%2Fimage-generation%2F@fff026d3ebb4b5745c2135faf3303e47d2237d50c02e96d0fa7be0256c95752e