voice-clone

Warn

Audited by Socket on Oct 10, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/clone_voice.py

The code appears to implement an explicit voice-cloning workflow rather than malware. Its principal security concern is unsanitized --name input used in filesystem paths, which can enable path traversal and file overwrites. Audio is intentionally sent to an external service or temporary public host, so users should consider the privacy implications.

Confidence: 98%Severity: 54%
Audit Metadata
Analyzed At
Oct 10, 2026, 07:10 PM
Package URL
pkg:socket/skills-sh/puntorigen%2Favatar-skills%2Fvoice-clone%2F@abaa341117c195cec3cc173f6bbbc087260706f248c40cbd5e0cd7f09aead76d