baoyu-compress-image

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill footprint is coherent with its stated purpose: it performs local, multi-tool-based image compression with configurable formats and quality, writing results to disk or emitting JSON. There are no credential, network, or data-exfiltration risks evident in the described flow. The primary risks would be if runtime tool installation required downloading unverifiable binaries or if outputs unintentionally overwrite user data; otherwise the design is proportionate and benign.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 01:26 PM
Package URL
pkg:socket/skills-sh/jimliu%2Fbaoyu-skills%2Fbaoyu-compress-image%2F@89defb70c59bab3d58eb799b9ad51e23a6e0dc7e