skills/inference-sh-8/skills/speech-to-text/Socket

speech-to-text

Warn

Audited by Socket on Mar 27, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill's functionality aligns with speech-to-text, and data flows mainly match that purpose, but it relies on an external authenticated CLI, uses a same-org curl|sh install path, and encourages transitive installation of other skills. This is more a platform trust and supply-chain risk than evidence of malware.

Confidence: 85%Severity: 57%

Audit Metadata

Analyzed At

Mar 27, 2026, 02:29 PM

Package URL

pkg:socket/skills-sh/inference-sh-8%2Fskills%2Fspeech-to-text%2F@8a91e250ce34d99bf00a81e86be3f4a0b1276b54