gemini

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's core function is coherent for TTS, but it is misrepresented as Gemini/Google while actually routing all content and credentials through Pixazo, a third-party gateway. The credential persistence and unrelated transitive skill-install instruction further increase risk, though there is no confirmed malware or exploit behavior.

Confidence: 91%Severity: 68%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:03 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fgemini%2F@3f5ad65b1aa207fbc97eb9eb6057a03f26d390218d778f41d2c7ee2c56420dd3