setup-api-key

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements strong security practices for credential management. It explicitly instructs users not to paste API keys into the chat interface, which prevents sensitive data from being logged in session histories. Instead, it directs users to store the key in a local .env file, a standard practice for local development and agent configuration.
  • [SAFE]: API key validation is performed against the official vendor endpoint (api.elevenlabs.io). Under the established security rules for well-known services and vendor-specific resources, these network operations are considered legitimate and safe for the intended purpose of verifying configuration.
  • [SAFE]: The skill includes explicit instructions for the agent to redact or withhold the API key value from its output, minimizing the risk of accidental exposure during the configuration process.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 11:02 PM