skills/whytryharder/skills/elevenlabs-music/Socket

elevenlabs-music

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the skill expands trust by requiring installation of another skill/CLI and routing use through inference.sh rather than a direct ElevenLabs integration. The main concerns are transitive skill installation, mutable installer/docs, and broader-than-needed shell capability, not confirmed malware.

Confidence: 85%Severity: 62%

Audit Metadata

Analyzed At

Aug 6, 2026, 05:02 AM

Package URL

pkg:socket/skills-sh/whytryharder%2Fskills%2Felevenlabs-music%2F@d65bdc451da110976a7c973c235681d070ce21c8bc9370fe959ae16f5a16183f