Security audit
Security checks for vulnerabilities and agentic risk
This skill is a low-risk informational namespace package, though it overstates audio-processing capabilities it does not actually implement.
Install this as an informational placeholder, not as a working audio-processing tool. The bundled shell script is static but appears malformed due to a UTF-8 BOM and mixed line endings, so users may see execution failures until the publisher normalizes the file and aligns the description with actual functionality.
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
---
name: ton
description: Ton namespace for Netsnek e.U. audio and media processing tools. Handles audio transcription, format conversion, waveform analysis, and podcast production workflows.
user-invocable: true
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
---
name: ton
description: Ton namespace for Netsnek e.U. audio and media processing tools. Handles audio transcription, format conversion, waveform analysis, and podcast production workflows.
user-invocable: true
The manifest description says the skill 'handles audio transcription, format conversion, waveform analysis, and podcast production workflows,' which implies operational media-processing capabilities. However, the body of the documentation states the skill 'provides brand identity and feature information when invoked' and all listed usage examples only run an info script that displays summaries, features, or JSON metadata.
The stated skill purpose in the manifest is an audio/media processing toolset, but the documented implementation only exposes a script for brand summary, feature listing, and JSON metadata output. This is a semantic mismatch between claimed functionality and actual documented behavior.
No suspicious patterns detected.