skills/pixazo-ai/skills/qwen-audio/Socket

qwen-audio

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core function is coherent for a TTS/ASR skill, but data flow is routed through Pixazo rather than official Alibaba/Qwen APIs, and the skill collects/persists raw API keys locally. The wildcard transitive skill install further broadens trust beyond the stated purpose. No confirmed malware or exploit behavior is present.

Confidence: 90%Severity: 66%

Audit Metadata

Analyzed At

Sep 22, 2026, 09:04 PM

Package URL

pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fqwen-audio%2F@7f61536429d5f1ada17b4bcd328d523261595c2c29f732e9120e5b9f065d3f4d