skills/jeremylongshore/claude-code-plugins-plus-skills/ideogram-install-auth/Socket

ideogram-install-auth

Warn

Audited by Socket on Mar 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is normal, but the actual install instructions are not internally consistent with verified Ideogram distribution paths. The skill directs users to install at least one unrelated package and one unverified package, then configure an API key for use with that code, creating a disproportionate supply-chain and credential-forwarding risk.

Confidence: 90%Severity: 82%

Audit Metadata

Analyzed At

Mar 23, 2026, 06:33 AM

Package URL

pkg:socket/skills-sh/jeremylongshore%2Fclaude-code-plugins-plus-skills%2Fideogram-install-auth%2F@49343c7fb4ced91b6810dceb34ecd9345b8b0c92