skills/halt-catch-fire/skills/elevenlabs-music/Socket

elevenlabs-music

Warn

Audited by Socket on Jul 22, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core music-generation purpose is plausible, but the skill’s footprint is expanded by transitive skill installation, broad Belt shell permissions, and credential/data routing through the inference.sh CLI platform rather than a direct ElevenLabs integration. Same-org evidence reduces likelihood of outright malware, but the trust chain and scope are broader than necessary.

Confidence: 85%Severity: 68%

Audit Metadata

Analyzed At

Jul 22, 2026, 07:32 AM

Package URL

pkg:socket/skills-sh/halt-catch-fire%2Fskills%2Felevenlabs-music%2F@c81630c8684c8ae6285b56ccb6386a8bf9f0b880c8aa154f0545d8727bbf3b07