threejs-audio-generator
Warn
Audited by Socket on Sep 6, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the overall workflow matches a real ElevenLabs audio-production use case, but the skill is more aggressive than necessary in credential probing and relies on unverified third-party local scripts to handle the API key and uploads. Data flows appear intended for official ElevenLabs endpoints, so this is not confirmed malware, but trust and scope are only partially proportional.
Confidence: 85%Severity: 60%
Audit Metadata