gemini
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's core function is coherent for TTS, but it is misrepresented as Gemini/Google while actually routing all content and credentials through Pixazo, a third-party gateway. The credential persistence and unrelated transitive skill-install instruction further increase risk, though there is no confirmed malware or exploit behavior.
Confidence: 91%Severity: 68%
Audit Metadata