ai-voice-cloning
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core purpose is coherent with TTS and media-generation workflows, and the install sources appear to be official or same-ecosystem rather than obvious attacker infrastructure. However, the skill depends on external CLI installation and repeatedly instructs the agent to install other skills, creating medium supply-chain and transitive-trust risk disproportionate to a simple voice-generation helper.
Confidence: 89%Severity: 61%
Audit Metadata