skills/inference-sh/skills/image-upscaling/Socket

image-upscaling

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s purpose and data flow are mostly coherent for cloud image upscaling, but it relies on an external CLI installed via unpinned pipe-to-shell and encourages transitive skill installation. This looks more like elevated supply-chain/trust risk than clear malicious behavior.

Confidence: 82%Severity: 61%

Audit Metadata

Analyzed At

Mar 18, 2026, 04:49 PM

Package URL

pkg:socket/skills-sh/inference-sh%2Fskills%2Fimage-upscaling%2F@ce4572d9439fb993721f276ba3ac1bf5b20470cd