threejs-audio-generator
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
threejs_audio_asset.py) to manage API interactions and perform audio processing tasks. - [EXTERNAL_DOWNLOADS]: The skill connects to the ElevenLabs API (
api.elevenlabs.io) to synthesize and process audio assets. ElevenLabs is a well-known service provider in the audio AI sector. - [CREDENTIALS_UNSAFE]: The skill includes a utility to verify the presence of the
ELEVENLABS_API_KEY. The validation feature (--validate) verifies account status and may output the user's email address or user ID to the agent's context. - [INDIRECT_PROMPT_INJECTION]: The skill provides an interface to process user-supplied audio files for isolation and voice conversion.
- Ingestion points: Input audio files passed to the
--inputargument inscripts/threejs_audio_asset.py. - Boundary markers: None; binary audio data is processed directly.
- Capability inventory: The skill possesses the ability to execute local scripts, read from/write to the file system, and perform network POST requests.
- Sanitization: No sanitization is performed on input audio data prior to its submission to the external API.
- Ingestion points: Input audio files passed to the
Audit Metadata