agent-debugging
Fail
Audited by Socket on Feb 26, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
This Skill is a legitimate debugging/troubleshooting guide and helper code for an ElevenLabs + Twilio voice agent. It calls official vendor APIs and reads local logs/configs as expected for the purpose. No active malware or exploitation code was found. Main security concerns are operational: unredacted logging of PII and transcripts, potential leakage of conversation IDs, and broad read/write tooling that could expose secrets if misused. Recommendations: ensure logs redact PII and secrets, avoid logging full transcripts in production, limit file access permissions, rotate and scope API keys, and treat conversation IDs as sensitive when appropriate.
Confidence: 95%Severity: 90%
Audit Metadata