audio-extract-api

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core Pixazo endpoint and domains appear official, but the skill is internally inconsistent: it is labeled as audio extraction while repeatedly instructing image-generation behavior, misstates the API's async response model, reads and persists raw API keys locally, and includes unrelated wildcard transitive skill installation. Not confirmed malware, but the skill's scope and instructions are not cleanly aligned with its stated purpose.

Confidence: 91%Severity: 68%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:02 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Faudio-extract-api%2F@bbbcb0b7e29b19d97608179c65963084ba93a1a3c874373d1d39eebdaf40f5c4