vibe-voice

Warn

Audited by Socket on Jun 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly coherent documentation for a voice AI skill, but the primary `pip install vibevoice` path is not aligned with the claimed Microsoft publisher. This is suspicious as install-trust/supply-chain hygiene, not malware: safer path is the official Microsoft GitHub repo and Microsoft-hosted model assets.

Confidence: 91%Severity: 56%
Audit Metadata
Analyzed At
Jun 24, 2026, 01:17 PM
Package URL
pkg:socket/skills-sh/TerminalSkills%2Fskills%2Fvibe-voice%2F@c4990c4cd96728e42e87eed74d05ace368aa2ee9c22a52a5afe002bcc57707cb
Security Audit — socket — vibe-voice