podcast-generation
Warn
Audited by Socket on Sep 14, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose is coherent for a podcast/TTS skill, and there is no remote installer or obvious malware pattern in the markdown. However, the skill forwards API credentials and user content into an unseen local Python script while discouraging inspection, and the supplied evidence shows MiniMax endpoint/host inconsistencies versus official docs. That makes the data flow only partially verifiable, so this is medium risk rather than benign.
Confidence: 79%Severity: 56%
Audit Metadata