video-replace-audio-api

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The main API call and key-console domains are internally consistent with Pixazo, but the skill is sloppy and overreaches: its stated behavior mixes video audio replacement with unrelated image-generation instructions, persists raw API keys locally, routes data through a gateway intermediary, and promotes wildcard installation of additional unreviewed skills. Not confirmed malware, but the inconsistencies and transitive trust make it medium risk.

Confidence: 89%Severity: 58%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:04 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Fvideo-replace-audio-api%2F@f4f88d2a110cc9bcaf793c75326e0021ed766532c65f68c935953e452ebfb3b4