speechace

Warn

Audited by Socket on Apr 2, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's stated Speechace integration purpose is coherent, and the CLI source appears legitimate, but all authentication and API traffic are funneled through Membrane instead of directly to Speechace. That third-party mediation is a meaningful data-flow and trust expansion, making the skill medium risk rather than benign.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Apr 2, 2026, 09:49 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fspeechace%2F@d6946d6e244276fad9a1d977e25bf1f81864894e