xai-tts

SUSPICIOUS. The skill's basic TTS/STT purpose is coherent, but it misbrands access to 'Grok Voice API' while actually routing user data and credentials through Pixazo instead of xAI's official endpoints. Credential persistence to a local file and the wildcard transitive skill install add moderate risk, though there is no evidence of malware, hidden execution, or an unverifiable binary.