elevenlabs-sound-effects
Warn
Audited by Socket on Jul 23, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s purpose is plausible, but its real footprint depends on transitive skill installation, a remote-installed external CLI, credential submission through that CLI, and platform-mediated routing to inference.sh rather than direct ElevenLabs APIs. Same-org branding and checksum support reduce the chance of outright malware, but the dependency and credential-forwarding model is high risk for a narrowly scoped audio skill.
Confidence: 84%Severity: 83%
Audit Metadata