elevenlabs-voice-changer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill's setup instructs installing material via npx skills add belt-sh/cli, an operational remote-repository fetch whose publisher (the belt-sh org) is not established as first-party, so it is common/reputable unofficial at medium tier, while the inference-sh GitHub sources are plausibly first-party and the belt app run calls are outbound control-plane only.