skills/magentosh/skills/dialogue-audio/Socket

dialogue-audio

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated purpose is coherent, but the trust chain is not: this skill installs another skill, then relies on a remotely installed CLI using pipe-to-shell, and forwards authentication plus user content through that CLI. The main concern is supply-chain and credential-forwarding risk, not overt malicious behavior.

Confidence: 87%Severity: 82%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:04 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Fdialogue-audio%2F@ce13df078007ac9863b698de6e5cabb825a5662fbe7022860c7bc12b70d21664