dialogue-audio
Warn
Audited by Socket on Sep 8, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core purpose is coherent with using a TTS/audio CLI, and the network destination appears related to inference.sh, not an obvious exfiltration service. However, the skill expands scope by instructing transitive skill installation, and the lead installer reference (`belt-sh/cli`) is not cleanly tied to the official inference.sh publisher in the provided evidence. This is not confirmed malware, but it carries meaningful trust-chain and installer provenance risk.
Confidence: 87%Severity: 56%
Audit Metadata