setup-api-key

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill manages the ELEVENLABS_API_KEY by interacting with the .env file. This is standard practice for secret management and is handled within the scope of the skill's setup purpose.
  • [PROMPT_INJECTION]: The skill processes external data from environment files and user input during the configuration workflow. It implements a functional check against the official ElevenLabs API to ensure the provided key is valid before finalizing the setup.
  • Ingestion points: Local .env configuration file and user-provided API key input.
  • Boundary markers: The skill performs direct interpolation of the key for validation and storage.
  • Capability inventory: File system read/write access and network communication with the official ElevenLabs API.
  • Sanitization: Input is validated via a functional API call to api.elevenlabs.io to ensure it is a valid service key.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 06:34 PM