setup-transcriptformer-remote-tool
Warn
Audited by Socket on Aug 24, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The local setup steps mostly fit the stated purpose, but the optional sharing path materially expands trust to an unpublished externally hosted relay package that handles authentication and remote exposure. Because the skill installs non-registry relay code and then uses it with service credentials, its footprint is riskier than a normal setup guide and warrants high supply-chain caution.
Confidence: 85%Severity: 84%
Audit Metadata