music
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation guide references official vendor packages on NPM (@elevenlabs/elevenlabs-js, @elevenlabs/cli) and PyPI (elevenlabs).
- [REMOTE_CODE_EXECUTION]: The installation guide provides a command to download and execute a script from the vendor's official repository (https://github.com/elevenlabs/cli/releases/latest/download/elevenlabs-cli-installer.sh | sh). This is a standard installation procedure for the vendor's command-line interface.
- [INDIRECT_PROMPT_INJECTION]: The skill handles user-provided text in the prompt and description fields. 1. Ingestion points: text prompts in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: Audio file creation and API communication. 4. Sanitization: Handled by the ElevenLabs API, which provides automated filtering for copyrighted and disallowed content.
Audit Metadata