text-to-speech
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation guide in
references/installation.mdincludes a method for installing the ElevenLabs CLI by fetching a shell script from the vendor's official GitHub repository and piping it to the shell (curl ... | sh). This represents a standard installation procedure for the vendor's own command-line tools. - [COMMAND_EXECUTION]: In
references/streaming.md, the skill demonstrates real-time audio playback using thesubprocessmodule to call the localffplayutility. The script pipes generated audio data directly to the player's standard input. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of official libraries and tools, including the
elevenlabsPython package,@elevenlabs/elevenlabs-jsNode.js package, and ElevenLabs CLI via Homebrew, Scoop, and NPM, all sourced from the vendor's official registries and repositories. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and synthesize arbitrary text input into speech, which introduces a surface for indirect prompt injection.
- Ingestion points: The
textparameter in theconvertandstreammethods across Python and JavaScript examples. - Boundary markers: Examples do not explicitly show the use of boundary delimiters or specific safety instructions for the input text.
- Capability inventory: The skill performs network API calls to ElevenLabs services and writes audio data to the local file system.
- Sanitization: No explicit sanitization or filtering of the input text is described before synthesis.
Audit Metadata