skills/inferen-sh/skills/elevenlabs-music/Socket

elevenlabs-music

Warn

Audited by Socket on Apr 23, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill is mostly coherent for hosted music generation, but it relies on a same-org remote CLI installer, routes activity through inference.sh instead of direct ElevenLabs endpoints, and includes explicit transitive skill-install commands. These are medium-risk trust and scope concerns rather than confirmed malicious behavior.

Confidence: 83%Severity: 52%

Audit Metadata

Analyzed At

Apr 23, 2026, 05:46 AM

Package URL

pkg:socket/skills-sh/inferen-sh%2Fskills%2Felevenlabs-music%2F@e8f278f37bcd1557a181c8f862e062dbfbe5cb63