muse-voice

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The core API flow mostly matches a same-org Pixazo gateway, but the skill is internally inconsistent about its purpose and response model, stores and reuses credentials from a local file, and includes a high-risk transitive install instruction for an unverified wildcard skill set. Not confirmed malware, but the skill's actual footprint is not fully coherent with its stated purpose.

Confidence: 90%Severity: 74%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:04 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fmuse-voice%2F@e62f5dc4388da566b6397ebaeee2793761c9171aa2ebd5be1c8ff3b6ab4f2b4c