gpt-4o

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's main inconsistency is branding itself as OpenAI Text-to-Speech while routing all requests and credentials through Pixazo instead of OpenAI's official API. The flow is coherent for a Pixazo gateway skill, but not for a direct OpenAI skill; local key persistence and the transitive skill-install instruction add moderate risk.

Confidence: 92%Severity: 72%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:04 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fgpt-4o%2F@8293c02a222966629b55f173e70bc93a93a7c03269f9b5b1a8686f0acb403885