text-to-speech
Warn
Audited by Socket on Aug 6, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose matches the capabilities, and the linked CLI install/docs appear to be same-org and partially verified. However, the skill's entrypoint relies on transitive skill installation (`belt-sh/cli`) that was not verified as the publisher's documented path, plus additional skill-to-skill installs and a remote CLI trust boundary. This looks more like a legitimate but higher-risk hosted tooling skill than malware.
Confidence: 88%Severity: 64%
Audit Metadata