pipa-huddle-beta
Warn
Audited by Socket on Aug 6, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's core behavior is mostly coherent with its stated purpose of launching a voice huddle, and the relay/OpenCode flows are proportionate for that use case. The main concerns are third-party data routing through voice.usepipa.com, persistence of session metadata, and a publisher-identity mismatch between the usepipa domain and the documented GitHub skill source, which weakens install trust enough to avoid a benign classification.
Confidence: 80%Severity: 58%
Audit Metadata