skills/wangyan/wangyan-skills/wangyan-gemini-image-gen/Socket

wangyan-gemini-image-gen

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core image-generation purpose is coherent and the uv installer is an official same-org path, but the skill permits arbitrary API base URLs and forwards the Gemini API key and image content to that endpoint. This makes credential and data routing insufficiently constrained for a normal Gemini image skill.

Confidence: 90%Severity: 68%

Audit Metadata

Analyzed At

Mar 14, 2026, 08:45 PM

Package URL

pkg:socket/skills-sh/wangyan%2Fwangyan-skills%2Fwangyan-gemini-image-gen%2F@476cd8baf6e3f933f5262c487c53d04c966a57c9