skills/membranedev/application-skills/azure-speech-service/Socket

azure-speech-service

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill is mostly coherent for a Membrane-based Azure Speech integration and uses an official npm package, so it is not overtly malicious. The main risk is architectural: Azure authentication and data flow through Membrane’s intermediary service rather than directly to Microsoft, plus mutable `@latest` CLI installation and broad proxy capability increase trust and exposure.

Confidence: 88%Severity: 53%

Audit Metadata

Analyzed At

Apr 28, 2026, 08:14 PM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fazure-speech-service%2F@93fe9dd775d204be6997135abc3cc1f9fd57273a