threejs-audio-generator
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes authenticated requests to the ElevenLabs API (
api.elevenlabs.io) to generate sound effects, perform text-to-speech, and process audio files. This communication is restricted to the official API of the service provider and is necessary for the skill's primary purpose. - [COMMAND_EXECUTION]: The skill uses a local Python script (
threejs_audio_asset.py) to manage audio generation and file operations. The script uses standard libraries and does not perform any suspicious system-level operations. - [COMMAND_EXECUTION]: The instructions include commands to source shell profile files (
~/.zprofile,~/.zshrc) to ensure environment variables are correctly loaded. This is a common practice for picking up user-configured API keys. - [CREDENTIALS_UNSAFE]: The skill includes a 'probe' mechanism to check if the
ELEVENLABS_API_KEYenvironment variable is set. It correctly instructs users not to hardcode keys in files and provides a method to validate the key against the ElevenLabs/userendpoint.
Audit Metadata