tts

Warn

Audited by Socket on Oct 25, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s stated purpose and local file access are coherent for text-to-speech, but its core capability depends on an unverifiable bundled `tts` binary that sends user content to an undisclosed backend. There is no clear sign of overt malware or credential theft, yet the opaque executable and unverified network destination create high security risk under the mandatory unverifiable-binary rule.

Confidence: 87%Severity: 82%
Audit Metadata
Analyzed At
Oct 25, 2026, 01:37 PM
Package URL
pkg:socket/skills-sh/win4r%2Fmuseai-skills%2Ftts%2F@21a402e46404366e15fcb833226c654ee98aac7a3da0d02eb9ffb6ec6414c452