elevenlabs-tts

SUSPICIOUS. The core function is plausible, but the skill is not a direct ElevenLabs integration: it funnels use through inference.sh, requires installing another skill, and grants broad `belt *` command access. The main risk is supply-chain and transitive trust expansion rather than confirmed malware.