daily-news-caster

Warn

Audited by Socket on Mar 19, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the overall workflow is plausible, but the skill’s main behavior depends on transitive installation of third-party GitHub skills, including one unverifiable TTS dependency, then forwards user content and optional voice samples to that external TTS path. The capability fits the stated purpose, but install trust and delegated data flow are not proportionate enough to treat as benign.

Confidence: 88%Severity: 79%
Audit Metadata
Analyzed At
Mar 19, 2026, 10:38 AM
Package URL
pkg:socket/skills-sh/NoizAI%2Fskills%2Fdaily-news-caster%2F@b14430c024620a173ef0a9b46f9c5e8400a78488