elevenlabs-voice-isolator
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the installation of the
beltCLI usingnpxand refers to installation documentation hosted on a remote GitHub repository (inference-sh/skills). - [COMMAND_EXECUTION]: The skill provides examples of shell commands used to interact with the ElevenLabs service via the
beltCLI. The skill's configuration limits the agent's ability to execute commands to those starting with thebeltprefix, which follows the principle of least privilege. - [INDIRECT_PROMPT_INJECTION]: The skill processes external audio URLs provided by the user.
- Ingestion points: The
audioparameter within the JSON input inSKILL.mdserves as the entry point for untrusted data. - Boundary markers: The use of structured JSON for the CLI input provides implicit boundaries for the data.
- Capability inventory: The skill is capable of executing the
beltCLI tool via Bash to send data to external APIs. - Sanitization: Sanitization is not explicitly defined within the markdown instructions; security relies on the underlying CLI tool and API handling of the URL input.
Audit Metadata