skills/decolua/9router/9router-stt/Socket

9router-stt

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill’s capabilities fit speech-to-text, but its core data flow sends audio and optional bearer credentials to a user-specified 9Router gateway instead of official provider APIs. That proxy design is proportionate to the stated purpose yet creates medium trust and privacy risk because the gateway can see uploaded files and keys.

Confidence: 88%Severity: 56%

Audit Metadata

Analyzed At

Oct 9, 2026, 08:18 PM

Package URL

pkg:socket/skills-sh/decolua%2F9router%2F9router-stt%2F@bbb091d28d967a7a3e77df8a8707ee6dc390dd454b2bf3220dcd91913958d949