voice

Warn

Audited by Socket on Oct 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core local speech features are coherent and mostly proportionate, but the optional llm-router/OpenAI-compatible routing materially changes the trust boundary by sending speech data and possibly API credentials through third-party infrastructure. No confirmed malware or covert behavior is shown, yet the remote-backend and intermediary data-flow options make this higher risk than a purely local voice skill.

Confidence: 85%Severity: 64%
Audit Metadata
Analyzed At
Oct 24, 2026, 06:58 PM
Package URL
pkg:socket/skills-sh/iii-hq%2Fworkers%2Fvoice%2F@70a48ef226a5323a2516edf6e461f33ea19dbcae3d09b03141a96be185985726