chatterbox

SUSPICIOUS: the core TTS behavior is coherent, but the skill routes credentials and content through Pixazo’s intermediary gateway rather than the official model vendor endpoint, stores the key for automatic reuse, contains documentation inconsistent with the provider’s own async/polling behavior, and adds unnecessary transitive-trust instructions to install a wildcard skill bundle. This is not confirmed malware, but the data-flow and trust model are riskier than the skill description implies.