mai-voice
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core voice capability is coherent, but the skill routes Microsoft-branded MAI Voice traffic and credentials through Pixazo's third-party gateway, stores the API key locally in raw form, and promotes wildcard installation of more skills. This is not confirmed malware, but the intermediary data flow and transitive-trust expansion make the skill higher risk than a direct official Azure integration.
Confidence: 90%Severity: 66%
Audit Metadata