transcribe-audio

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's purpose is coherent, but its data flow is riskier than a direct transcription integration because it routes audio and credentials through Portkey, a third-party gateway, and the actual transcription script/dependency pinning is not visible. This is not confirmed malware, but it has medium-to-high security risk due to intermediary credential forwarding and unverifiable execution details.

Confidence: 89%Severity: 72%
Audit Metadata
Analyzed At
Mar 29, 2026, 07:15 AM
Package URL
pkg:socket/skills-sh/markus1189%2Fnixos-config%2Ftranscribe-audio%2F@04ac6365fb0599b1e2a147c4e5e97452760996d0