dialogue-audio

Warn

Audited by Socket on Sep 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core purpose is coherent with using a TTS/audio CLI, and the network destination appears related to inference.sh, not an obvious exfiltration service. However, the skill expands scope by instructing transitive skill installation, and the lead installer reference (`belt-sh/cli`) is not cleanly tied to the official inference.sh publisher in the provided evidence. This is not confirmed malware, but it carries meaningful trust-chain and installer provenance risk.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Sep 8, 2026, 05:09 PM
Package URL
pkg:socket/skills-sh/its-a-skill-issue%2Fsuperpowers%2Fdialogue-audio%2F@325e2377f99ed5ded79c2bf48a0a2f938c7530619a5ba7a8f1be67a67dfb3b8c
Security Audit — socket — dialogue-audio