tts

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill's purpose and local media-processing scope are coherent, and there is no obvious credential harvesting or off-device routing of user content. However, its core functionality depends on installing and executing an unverified external CLI from a GitHub repo that could not be confirmed as the official source, creating a disproportionate supply-chain risk for an otherwise benign TTS/STT wrapper.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Mar 29, 2026, 01:33 AM
Package URL
pkg:socket/skills-sh/crazynomad%2Fskills%2Ftts%2F@b0e1c75055499796c94fb67f9ad79cd15cac7b7a
Security Audit — socket — tts