skills/membranedev/application-skills/elevenlabs/Socket

elevenlabs

Warn

Audited by Socket on Apr 24, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s purpose is plausible, and the CLI install source appears official, but the actual integration is primarily with Membrane as an intermediary rather than direct ElevenLabs APIs. That third-party proxy/control-plane design is a meaningful data-flow and credential-handling concern, though not strong evidence of malware.

Confidence: 85%Severity: 58%

Audit Metadata

Analyzed At

Apr 24, 2026, 10:47 AM

Package URL

pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Felevenlabs%2F@974da3da2d8ce29784ae1fab0eee65c2d571d2f6