elevenlabs-voice-changer
Warn
Audited by Socket on Apr 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Purpose and capability are aligned: the skill is clearly for remote voice conversion. The main risk is trust in the external `infsh` CLI and installer, plus credential forwarding through that CLI and optional installation of more skills. This looks more suspicious-than-benign from a security standpoint, but not clearly malicious.
Confidence: 85%Severity: 78%
Audit Metadata