skills/qu-skills/skills/elevenlabs-voice-changer/Socket

elevenlabs-voice-changer

Warn

Audited by Socket on Jul 16, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s voice-conversion purpose is coherent, but it expands trust by requiring a transitive skill install and an external CLI with shell execution and remote login. Same-org documentation lowers the chance of outright malware, yet the publisher mismatch and broad Bash access make the footprint riskier than a simple API-integrated media skill.

Confidence: 84%Severity: 66%

Audit Metadata

Analyzed At

Jul 16, 2026, 10:50 PM

Package URL

pkg:socket/skills-sh/qu-skills%2Fskills%2Felevenlabs-voice-changer%2F@313f00f9716d66f884a089d43b09d987ff3a0903374a18fb7c1d5cc5c1108144