skills/magentosh/skills/elevenlabs-stt/Socket

elevenlabs-stt

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated STT purpose is coherent, but the trust chain is not clean. The skill asks the agent to install another skill (`belt-sh/cli`), references mutable raw GitHub install docs, and does not cleanly match the official inference.sh Belt distribution paths, while also requiring credentialed remote uploads of user audio/text.

Confidence: 82%Severity: 74%

Audit Metadata

Analyzed At

Jul 23, 2026, 06:05 PM

Package URL

pkg:socket/skills-sh/magentosh%2Fskills%2Felevenlabs-stt%2F@48fbe0044a1541cdd4c00019a62e05a6ae06d4d927f82292d4d873a73977ca61