skills/hoangvantuan/soniox-cli/soniox/Socket

soniox

Warn

Audited by Socket on Sep 25, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the skill’s purpose is coherent, but its install and trust model are not. It asks the agent to install a Soniox CLI from an unrelated personal GitHub repo and then supply a Soniox API key to that code, which is disproportionate compared with using an official SDK, package, or vendor-owned CLI distribution.

Confidence: 88%Severity: 81%

Audit Metadata

Analyzed At

Sep 25, 2026, 03:02 PM

Package URL

pkg:socket/skills-sh/hoangvantuan%2Fsoniox-cli%2Fsoniox%2F@22afcdfef3c543bc51f8114955db6d48094469f1210dc6e9645a028d13f7291c