fish-audio
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's core function is coherent for TTS/STT, but it is not a direct Fish Audio integration: it reroutes content and credentials through Pixazo's gateway, contrary to Fish Audio's official API pattern. Local API-key persistence is proportionate but sensitive, and the wildcard transitive skill-install instruction is unrelated scope expansion that materially increases risk.
Confidence: 94%Severity: 74%
Audit Metadata