c-studio-audio
Warn
Audited by Socket on May 5, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. Most capabilities fit an audio-production skill, and the local transcription/SFX/file outputs are coherent. The main issue is the primary TTS path: it routes user text and an API key through an unverified Railway-hosted Floe service instead of the official ElevenLabs API, creating a disproportionate credential and data-flow risk. The direct ElevenLabs fallback looks benign, but the default intermediary keeps overall risk at medium-high.
Confidence: 87%Severity: 78%
Audit Metadata