sound-design

The code appears to be a legitimate ElevenLabs audio-generation and normalization utility, with no clear evidence of malware or intentional covert behavior. The main security issue is unsanitized fx.name usage, which can enable path traversal and unintended file overwrite/deletion when the configuration is untrusted. FFMPEG_PATH and FFPROBE_PATH should also be trusted or constrained because they select executables. API-key transmission and prompt disclosure to ElevenLabs are expected behavior but should be considered in the threat model.