AudioMind

Fail

Audited by Socket on Mar 4, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

AudioMind presents a coherent feature set for a multi-model audio generation dispatcher, aligning with its stated purpose (TTS, music, SFX, voice cloning via ElevenLabs/MCP and fal.ai). It relies on external services and a proxy-based routing architecture, which is expected for a centralized audio generation workflow but introduces supply-chain and data-flow risks typical for such integrations. The main security considerations are credential handling (env-based API keys), data exposure to third-party services (text prompts, voice samples), and reliance on external proxies/registries. Overall, the footprint is proportionate to the stated purpose, but the governance around data handling, consent, retention, and trust in third-party endpoints warrants careful review. Potential risks are elevated by proxy usage and cross-service data flow; ensure explicit user consent, per-call key scoping, and secure configuration management to reduce exposure.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Mar 4, 2026, 12:11 PM
Package URL
pkg:socket/skills-sh/pexoai%2Fpexo-skills%2Faudiomind%2F@2b92bd09849bbf02c733e813b1e134b0e21a24a6