dreamina-canvas-cli-text2voice
Warn
Audited by Socket on Oct 1, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core TTS behavior is coherent and proportionate, but the skill instructs the agent to install another skill, creating medium transitive-trust and supply-chain risk. Because the installer points to the same publisher and there is no direct credential exfiltration or covert behavior, this is not malicious, but it is not fully benign.
Confidence: 89%Severity: 56%
Audit Metadata