plaud-embedded-android-sdk-skill

Warn

Audited by Socket on Oct 11, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose and capabilities mostly align, and the docs/repos appear to be same-org Plaud resources, but the core functionality depends on a proprietary prebuilt AAR that is not registry-distributed or independently verifiable. Because that binary receives credentials and device/audio data, the install trust and credential-forwarding risks are materially elevated even without evidence of overt malicious behavior.

Confidence: 84%Severity: 82%
Audit Metadata
Analyzed At
Oct 11, 2026, 06:09 PM
Package URL
pkg:socket/skills-sh/plaud-ai%2Fplaud-embedded-skills%2Fplaud-embedded-android-sdk-skill%2F@33b2bbbf633804a424bf641f492f3a3a95aaa092ab6ebe0a538cd2aa0739d78c