ai-voice-cloning

Warn

Audited by Socket on Sep 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core purpose is coherent with TTS and media-generation workflows, and the install sources appear to be official or same-ecosystem rather than obvious attacker infrastructure. However, the skill depends on external CLI installation and repeatedly instructs the agent to install other skills, creating medium supply-chain and transitive-trust risk disproportionate to a simple voice-generation helper.

Confidence: 89%Severity: 61%
Audit Metadata
Analyzed At
Sep 19, 2026, 10:24 AM
Package URL
pkg:socket/skills-sh/inference-sh%2Fskills%2Fai-voice-cloning%2F@4a7c498d5ceaae644f68d45bb220d19a4cb70ceeebf4c2a25ea83751a7aa3b5c