skills/noizai/skills/characteristic-voice/Socket

characteristic-voice

Warn

Audited by Socket on Mar 19, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s core purpose is coherent, but it transfers user text, reference audio, and an API key to an unrelated third-party voice service through an unreviewed local wrapper. This is not clearly malicious, yet the external credential/data forwarding and incomplete visibility into speak.sh make the risk medium-high.

Confidence: 84%Severity: 66%

Audit Metadata

Analyzed At

Mar 19, 2026, 02:11 AM

Package URL

pkg:socket/skills-sh/NoizAI%2Fskills%2Fcharacteristic-voice%2F@9a4842f2d6de10eed4d8ef001bd3e77ce0a11346