threejs-audio-generator

Warn

Audited by Socket on Sep 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the overall workflow matches a real ElevenLabs audio-production use case, but the skill is more aggressive than necessary in credential probing and relies on unverified third-party local scripts to handle the API key and uploads. Data flows appear intended for official ElevenLabs endpoints, so this is not confirmed malware, but trust and scope are only partially proportional.

Confidence: 85%Severity: 60%
Audit Metadata
Analyzed At
Sep 6, 2026, 10:43 AM
Package URL
pkg:socket/skills-sh/majidmanzarpour%2Fthreejs-game-skills%2Fthreejs-audio-generator%2F@a2d8da73154e0a053d435d2dafae669a4ca4884cbce7cf6bb02ce87b4081cd8f
Security Audit — socket — threejs-audio-generator