elevenlabs-dialogue

The skill’s core function is coherent, but its footprint is broader than a simple ElevenLabs integration: it requires transitive skill installation, relies on a third-party CLI/service as an intermediary, and uses mixed publisher identities. This is better classified as suspicious/high-risk supply-chain and data-routing exposure rather than confirmed malware.