video-replace-audio-api
Warn
Audited by Socket on Sep 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The main API call and key-console domains are internally consistent with Pixazo, but the skill is sloppy and overreaches: its stated behavior mixes video audio replacement with unrelated image-generation instructions, persists raw API keys locally, routes data through a gateway intermediary, and promotes wildcard installation of additional unreviewed skills. Not confirmed malware, but the inconsistencies and transitive trust make it medium risk.
Confidence: 89%Severity: 58%
Audit Metadata