voice-editor
Fail
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The voice-editor skill presents a well-scoped, text-only editing workflow with clear purpose to align content to a VOICE.md profile. There are no indicated security-sensitive data flows (no credentials, no network exfiltration, no remote code execution). As described, the footprint is benign and proportional to its stated purpose. Minor privacy considerations exist around VOICE.md content, but this is inherent to the feature and not a security flaw in the skill itself. Overall, the skill is consistent and appropriate for its described function.
Confidence: 98%
Audit Metadata