elevenlabs-agents
Fail
Audited by Socket on Feb 15, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
BENIGN TREND WITH HIGH IMPLEMENTATION RISK: The fragment itself shows no malware or covert behavior. It is a comprehensive developer guide with credential-related patterns that, if implemented securely, pose no inherent risk. However, its breadth of credential usage, signed URL flows, webhook handling, and CSP/worklet configurations create ample opportunity for misconfiguration in real-world deployments. Emphasize secure secret management, rotation, server-mediated credential delivery, strict CSP, and proper validation of webhooks to mitigate risk.
Confidence: 98%Severity: 55%
Audit Metadata