elevenlabs-tts
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation instructions and documentation from a GitHub repository associated with the inference-sh organization. This is routine for configuring external CLI dependencies.
- [COMMAND_EXECUTION]: The skill uses the
beltcommand-line interface to interact with the ElevenLabs API via theBashtool. The scope is limited to thebeltbinary as defined in theallowed-toolsfrontmatter. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a sink for text data intended for speech synthesis, creating an ingestion surface for untrusted content.
- Ingestion points: The
textfield within the JSON input passed to thebelt app runcommand inSKILL.mdexamples. - Boundary markers: None explicitly defined in the provided usage examples.
- Capability inventory: Executes shell commands via
Bash(belt *)to perform the API calls. - Sanitization: No specific sanitization or filtering of the input text is documented, which is standard for text-to-speech utilities where the text is the intended payload.
Audit Metadata