elevenlabs-voice-changer

Warn

Audited by Socket on Apr 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capability are aligned: the skill is clearly for remote voice conversion. The main risk is trust in the external `infsh` CLI and installer, plus credential forwarding through that CLI and optional installation of more skills. This looks more suspicious-than-benign from a security standpoint, but not clearly malicious.

Confidence: 85%Severity: 78%
Audit Metadata
Analyzed At
Apr 14, 2026, 11:30 PM
Package URL
pkg:socket/skills-sh/rafaelgrasa%2Fskills%2Felevenlabs-voice-changer%2F@005e1e68d218c422bf0287d77de34fbda5bcb113