c-studio-audio

Warn

Audited by Socket on May 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. Most capabilities fit an audio-production skill, and the local transcription/SFX/file outputs are coherent. The main issue is the primary TTS path: it routes user text and an API key through an unverified Railway-hosted Floe service instead of the official ElevenLabs API, creating a disproportionate credential and data-flow risk. The direct ElevenLabs fallback looks benign, but the default intermediary keeps overall risk at medium-high.

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
May 5, 2026, 07:41 PM
Package URL
pkg:socket/skills-sh/Vasanth19%2Fskills%2Fc-studio-audio%2F@d1c288ce2c942806ae5a126526569841bfe1c998