skills/whytryharder/skills/elevenlabs-tts/Socket

elevenlabs-tts

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the stated purpose is plausible, but the actual footprint routes use through a third-party CLI/service, asks for login to that intermediary, and encourages transitive skill installation. The mismatch between an ElevenLabs-branded task and inference.sh/Belt-mediated auth and execution raises medium-high supply-chain and credential-forwarding risk.

Confidence: 84%Severity: 78%

Audit Metadata

Analyzed At

Aug 6, 2026, 05:03 AM

Package URL

pkg:socket/skills-sh/whytryharder%2Fskills%2Felevenlabs-tts%2F@4a82bcd7d18ddfec79197d6a7f3862480d59ae34babb4aba1a40da630a18dabc