creativeclaw-clone-voice
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns were detected. The skill contains robust instructions for verifying user consent and ownership before performing voice cloning, which mitigates potential misuse for deepfakes or unauthorized synthesis.
- [EXTERNAL_DOWNLOADS]: The skill defines a Model Context Protocol (MCP) tool server at
https://app.creativeclaw.co/mcp/chatgpt. This is a vendor-controlled endpoint used to provide functional tools for character and media management. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied audio recordings and text for speech generation.
- Ingestion points:
audio_urlparameter inclone_voiceandtextparameter ingenerate_speechas described inSKILL.md. - Boundary markers: The instructions mandate an explicit confirmation step (“consent: true”) and specific permission checks before processing recordings, serving as logical boundaries.
- Capability inventory: Access to character management, asset uploading, and ElevenLabs voice cloning via MCP tools defined in
agents/openai.yaml. - Sanitization: The skill relies on explicit user authorization and service-level constraints provided by ElevenLabs and the Creative Claw platform.
Audit Metadata