audio-extract-api
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The core Pixazo endpoint and domains appear official, but the skill is internally inconsistent: it is labeled as audio extraction while repeatedly instructing image-generation behavior, misstates the API's async response model, reads and persists raw API keys locally, and includes unrelated wildcard transitive skill installation. Not confirmed malware, but the skill's scope and instructions are not cleanly aligned with its stated purpose.
Confidence: 91%Severity: 68%
Audit Metadata