skills/jeremylongshore/claude-code-plugins-plus-skills/ideogram-hello-world/Socket

ideogram-hello-world

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The stated purpose is benign, but the skill is internally inconsistent because it relies on an unverified @ideogram/sdk package and links to non-official-looking documentation domains while handling a real API key. Permissions are narrow and there is no direct exfiltration shown, but the install/auth trust story is weak enough to make this a medium-risk skill.

Confidence: 85%Severity: 62%

Audit Metadata

Analyzed At

Mar 23, 2026, 05:42 PM

Package URL

pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus-skills%2Fideogram-hello-world%2F@220e01a5b909ecef756e8c7018f4ce844660a91e