voice-clone

SUSPICIOUS. The skill's purpose and capabilities mostly align for cloud voice cloning, and there is no clear malware or download-execute behavior. The main risk is data-flow integrity: API keys, voice samples, and text are sent to third-party providers, and configurable base URLs allow routing them to non-official endpoints, especially in openai-compatible mode.