dialogue-audio

Warn

Audited by Socket on May 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core TTS purpose is plausible, but the skill relies on a transitive skill install, external CLI login, and mutable raw-GitHub install guidance with limited provenance clarity. The behavior is not clearly malicious, yet the install and credential-routing footprint is broader and less verifiable than a narrowly scoped dialogue-audio skill should need.

Confidence: 83%Severity: 72%
Audit Metadata
Analyzed At
May 19, 2026, 07:52 AM
Package URL
pkg:socket/skills-sh/inference-sh%2Fskills%2Fdialogue-audio%2F@66eb3578cb539a268942bcc5395d6875f15da0ae
Security Audit — socket — dialogue-audio