speechace
Warn
Audited by Socket on Apr 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's overall purpose is coherent and the CLI install source is legitimate, but it routes Speechace authentication and API traffic through Membrane's own platform rather than directly to Speechace. This third-party credential handling and proxying is broader than a simple Speechace integration and creates meaningful security/privacy risk despite not looking overtly malicious.
Confidence: 84%Severity: 58%
Audit Metadata