pp-elevenlabs

SUSPICIOUS. The main issue is purpose-to-footprint mismatch: an ElevenLabs documentation skill requires a third-party personal-scope CLI and forwards the user's ElevenLabs API key through that wrapper. The installs are same-owner and open source, which lowers malware confidence, but unpinned external binaries plus broad admin/messaging capabilities make the skill higher-risk than its stated documentation purpose suggests.