skills/dmccreary/ibook-skills/pronounce-button/Socket

pronounce-button

Warn

Audited by Socket on Jul 27, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The skill’s purpose is coherent and its intended data flow to ElevenLabs is plausible, but its core behavior is outsourced to an unpublished local script that receives the ElevenLabs API key. That unverifiable credential-handling component makes the skill high risk despite otherwise proportionate file access and an official final API destination.

Confidence: 91%Severity: 84%

Audit Metadata

Analyzed At

Jul 27, 2026, 01:29 PM

Package URL

pkg:socket/skills-sh/dmccreary%2Fclaude-skills%2Fpronounce-button%2F@b94fc1cc3d3d8ff700c418f20c4f227198043d52435661142599348b1c32b23d