elevenlabs-dubbing

Warn

Audited by Socket on Apr 17, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core dubbing behavior matches the stated purpose, but the skill relies on a non-registry external CLI, grants broad `infsh` Bash access, routes user media to a third-party cloud service, and encourages transitive installation of more skills. This looks more like a high-risk cloud-integration skill than confirmed malware.

Confidence: 84%Severity: 68%
Audit Metadata
Analyzed At
Apr 17, 2026, 09:27 AM
Package URL
pkg:socket/skills-sh/inference-sh-9%2Fskills%2Felevenlabs-dubbing%2F@a74b1cacb2ab6a5237757b52e9124d952eb3e26c
Security Audit — socket — elevenlabs-dubbing