text-to-speech
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation instructions for official ElevenLabs tools and libraries. This includes
@elevenlabs/clivia npm, Homebrew, Scoop, and a shell installer fromgithub.com/elevenlabs/cli. These are standard, well-documented distribution channels for the vendor's own tooling. - [COMMAND_EXECUTION]: The documentation includes CLI command examples (
elevenlabs text-to-speech convert) and a Python snippet that usessubprocess.Popento callffplayfor real-time audio playback. These are standard developer utility patterns for the intended purpose of the skill. - [DATA_EXFILTRATION]: The skill interacts with
api.elevenlabs.ioandwss://api.elevenlabs.ioto perform text-to-speech synthesis. This communication is restricted to the vendor's own API endpoints and is necessary for the skill's primary function. - [CREDENTIALS_UNSAFE]: The skill requires an
ELEVENLABS_API_KEY. The documentation correctly advises users to store this key in an environment variable or a.envfile, following industry best practices for secret management. No hardcoded keys are present in the provided files.
Audit Metadata