assemblyai

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's stated service identity is inconsistent with its actual credential and data flow. It is not confirmed malware, but it collects/stores a Pixazo key, routes requests through Pixazo rather than AssemblyAI, contains contradictory image vs speech capabilities, and encourages transitive installation of many additional skills.

Confidence: 92%Severity: 72%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:02 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fassemblyai%2F@58c24358e101b2c3e5f3056600e70670f3893ba5e340ee9b8d2008ff78e2ea60