sag-voice

SUSPICIOUS. The skill’s behavior is mostly coherent with its voice/TTS purpose, but it requires trusting a third-party CLI from a personal Homebrew tap and may forward ElevenLabs credentials from env or a local key file into that CLI. Data flow appears purpose-aligned and there is no clear exfiltration beyond intended ElevenLabs use, so this is not malicious, but the install and credential-forwarding footprint is higher risk than a direct official API integration.