text-to-speech

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's TTS purpose is coherent, but its trust model is weak. Main concerns are external CLI dependency, credential forwarding through Belt, inconsistent install provenance cues, wildcard CLI access, and repeated transitive skill installation. I found no clear evidence of outright malware or unrelated credential theft behavior.

Confidence: 86%Severity: 76%
Audit Metadata
Analyzed At
Jul 23, 2026, 06:05 PM
Package URL
pkg:socket/skills-sh/magentosh%2Fskills%2Ftext-to-speech%2F@74f928e408d69949f5df07e9a26ba6011a65325d9482800f85e4ca023beade15
Security Audit — socket — text-to-speech