skills/puntorigen/avatar-skills/voice-clone/Socket

voice-clone

Warn

Audited by Socket on Jul 10, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The core capability matches the stated voice-cloning/TTS purpose, and primary installs/services are legitimate. The main risk is data-flow expansion: cloning requires exposing a private voice sample through a public tunnel or, worse, third-party file hosts unrelated to Replicate/MiniMax, which is more permissive than many users may expect.

Confidence: 87%Severity: 61%

Audit Metadata

Analyzed At

Jul 10, 2026, 01:42 AM

Package URL

pkg:socket/skills-sh/puntorigen%2Favatar-skills%2Fvoice-clone%2F@cb6ed8acb2d0530a2d7104871c67ca1c9ec3ea75e828651765a2e5744a9c8352