voicemode-connect

SUSPICIOUS. The skill’s purpose and data flow are mostly coherent with remote voice routing through voicemode.dev, but it depends on an unpinned third-party npm bridge that handles OAuth/session material. This is a real supply-chain and credential-forwarding risk, though not strong evidence of malware or unrelated exfiltration.