skills/zhylq/yuan-skills/zhy-article-illustrator/Socket

zhy-article-illustrator

Warn

Audited by Socket on Mar 14, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core purpose is coherent for an article-illustration skill, and official Gemini/Qiniu usage would be proportionate. Risk rises because the skill allows arbitrary relay/base URLs, mentions an unverified Xiaomi-compatible provider, and forwards credentials/data through unseen local scripts, so data-flow trust is not fully intact.

Confidence: 87%Severity: 68%

Audit Metadata

Analyzed At

Mar 14, 2026, 02:44 AM

Package URL

pkg:socket/skills-sh/zhylq%2Fyuan-skills%2Fzhy-article-illustrator%2F@dc5c3c5a8b565d78a18d8e446290b393b3f347fb