text-to-speech

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The stated purpose matches the capabilities, and the linked CLI install/docs appear to be same-org and partially verified. However, the skill's entrypoint relies on transitive skill installation (`belt-sh/cli`) that was not verified as the publisher's documented path, plus additional skill-to-skill installs and a remote CLI trust boundary. This looks more like a legitimate but higher-risk hosted tooling skill than malware.

Confidence: 88%Severity: 64%
Audit Metadata
Analyzed At
Aug 6, 2026, 05:03 AM
Package URL
pkg:socket/skills-sh/whytryharder%2Fskills%2Ftext-to-speech%2F@5c8d04535602c13c231c9e5de97ce516b044330b9b76cfc0700406ddcc39c8e7
Security Audit — socket — text-to-speech