cartesia-line

Warn

Audited by Socket on Aug 25, 2026

1 alert found:

Anomaly
AnomalyLOW
references/calls-api.md

This module implements real-time microphone (MediaStream) capture, converts audio to 16-bit PCM, base64-encodes it, and streams it continuously over a WebSocket as JSON messages. No direct malware indicators are present in the fragment (no dynamic execution, persistence, or hidden behavior), but the capability to exfiltrate sensitive voice/audio content over the network is strong. Actual security posture depends on consent/enablement controls, WebSocket destination validation/allowlisting, transport security (TLS), and how authentication tokens are managed in the surrounding code.

Confidence: 60%Severity: 55%
Audit Metadata
Analyzed At
Aug 25, 2026, 04:36 PM
Package URL
pkg:socket/skills-sh/cartesia-ai%2Fskills%2Fcartesia-line%2F@a9b089bf47bce34daadcc5212b8fdca24e2190cfbbcb71f72732db63d6dec716
Security Audit — socket — cartesia-line