skills/carlheath/ogmios/audio-pipeline/Socket

audio-pipeline

Warn

Audited by Socket on Oct 7, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s capabilities fit its stated audio purpose, and ffmpeg/ElevenLabs usage is plausible, but it relies on opaque local scripts and an unspecified YouTube transcript MCP whose provenance is not established. The main risk is install/execution trust and credential/data forwarding through unverifiable wrappers, not confirmed malicious intent.

Confidence: 85%Severity: 76%

Audit Metadata

Analyzed At

Oct 7, 2026, 02:15 AM

Package URL

pkg:socket/skills-sh/carlheath%2Fogmios%2Faudio-pipeline%2F@a52d6eee2a935e9b4ddc68aae449bbb96c9495721cd275c8847697081b242764