skills/halt-catch-fire/skills/elevenlabs-dialogue/Socket

elevenlabs-dialogue

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated audio-generation purpose is plausible, but the actual footprint relies on a transitive skill install, an insufficiently verified external CLI, and credential/content routing through inference.sh instead of direct ElevenLabs APIs. This is disproportionate trust expansion for a simple TTS dialogue skill.

Confidence: 86%Severity: 84%

Audit Metadata

Analyzed At

Jul 22, 2026, 07:33 AM

Package URL

pkg:socket/skills-sh/halt-catch-fire%2Fskills%2Felevenlabs-dialogue%2F@febc27782b01b4d217c545463633df58e2d7ebe40a678569b621e6044e4c4b56