voicebox-voice-mcp-agent

SUSPICIOUS: the skill’s capabilities are mostly aligned with a local voice/MCP tool, and data flows are primarily localhost, but install trust is weakened by official-yet-unpinned curl|bash steps and a repo/publisher mismatch (ara.so skill pointing to jamiepine/voicebox). Credentials requested are proportionate, and there is no clear credential theft or covert exfiltration, so this is not malicious; overall risk is medium due to supply-chain and real-world action surface.