mai-voice

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core voice capability is coherent, but the skill routes Microsoft-branded MAI Voice traffic and credentials through Pixazo's third-party gateway, stores the API key locally in raw form, and promotes wildcard installation of more skills. This is not confirmed malware, but the intermediary data flow and transitive-trust expansion make the skill higher risk than a direct official Azure integration.

Confidence: 90%Severity: 66%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:04 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fmai-voice%2F@3679f96cc0cc89bd6f64eba8362652065f474ceb8e27569a5039918eb9d157a4