fish-audio

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's core function is coherent for TTS/STT, but it is not a direct Fish Audio integration: it reroutes content and credentials through Pixazo's gateway, contrary to Fish Audio's official API pattern. Local API-key persistence is proportionate but sensitive, and the wildcard transitive skill-install instruction is unrelated scope expansion that materially increases risk.

Confidence: 94%Severity: 74%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:03 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Ffish-audio%2F@e3c004692c41c66e9c2c40b922adc16f13009dc2d8218c42409c040aed4354ad