tts
Warn
Audited by Socket on Oct 25, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s stated purpose and local file access are coherent for text-to-speech, but its core capability depends on an unverifiable bundled `tts` binary that sends user content to an undisclosed backend. There is no clear sign of overt malware or credential theft, yet the opaque executable and unverified network destination create high security risk under the mandatory unverifiable-binary rule.
Confidence: 87%Severity: 82%
Audit Metadata