cartesia-line-voice-agent

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Anomaly
AnomalyLOW
references/calls-api.md

This module implements real-time microphone (MediaStream) capture, converts audio to 16-bit PCM, base64-encodes it, and streams it continuously over a WebSocket as JSON messages. No direct malware indicators are present in the fragment (no dynamic execution, persistence, or hidden behavior), but the capability to exfiltrate sensitive voice/audio content over the network is strong. Actual security posture depends on consent/enablement controls, WebSocket destination validation/allowlisting, transport security (TLS), and how authentication tokens are managed in the surrounding code.

Confidence: 60%Severity: 55%
Audit Metadata
Analyzed At
Sep 4, 2026, 06:57 AM
Package URL
pkg:socket/skills-sh/delorenj%2Fskills%2Fcartesia-line-voice-agent%2F@dfcf59877eaeb012c483543fcaffd1039d54c0d3a90b0d1aafcc0f8bfb133082
Security Audit — socket — cartesia-line-voice-agent