threejs-audio-generator

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill makes authenticated requests to the ElevenLabs API (api.elevenlabs.io) to generate sound effects, perform text-to-speech, and process audio files. This communication is restricted to the official API of the service provider and is necessary for the skill's primary purpose.
  • [COMMAND_EXECUTION]: The skill uses a local Python script (threejs_audio_asset.py) to manage audio generation and file operations. The script uses standard libraries and does not perform any suspicious system-level operations.
  • [COMMAND_EXECUTION]: The instructions include commands to source shell profile files (~/.zprofile, ~/.zshrc) to ensure environment variables are correctly loaded. This is a common practice for picking up user-configured API keys.
  • [CREDENTIALS_UNSAFE]: The skill includes a 'probe' mechanism to check if the ELEVENLABS_API_KEY environment variable is set. It correctly instructs users not to hardcode keys in files and provides a method to validate the key against the ElevenLabs /user endpoint.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 10:08 PM