skills/skills-101/superpowers/elevenlabs-tts/Socket

elevenlabs-tts

Warn

Audited by Socket on Aug 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the actual footprint routes use through a third-party CLI/service, asks for login to that intermediary, and encourages transitive skill installation. The mismatch between an ElevenLabs-branded task and inference.sh/Belt-mediated auth and execution raises medium-high supply-chain and credential-forwarding risk.

Confidence: 84%Severity: 78%

Audit Metadata

Analyzed At

Aug 17, 2026, 04:09 PM

Package URL

pkg:socket/skills-sh/skills-101%2Fsuperpowers%2Felevenlabs-tts%2F@df495d8e926fd67a7e2c2457e013bfe8dcf418d5