dubbing
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation instructions that fetch the official ElevenLabs CLI from their GitHub repository (elevenlabs/cli) and Homebrew tap. These are trusted, well-known sources for the vendor's own tooling.
- [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage their API keys using environment variables (
ELEVENLABS_API_KEY) and references standard OAuth login flows for local credential storage, which aligns with security best practices. - [COMMAND_EXECUTION]: The documentation includes standard CLI usage examples for project management and transcript editing. These commands are limited to the vendor's official toolset and operate within the expected scope of the dubbing service.
- [DATA_EXFILTRATION]: While the skill involves uploading media files to ElevenLabs for processing, this is the primary and stated purpose of the dubbing skill. The network operations target official vendor domains (api.elevenlabs.io) and well-known cloud storage (storage.googleapis.com) for downloading generated results.
Audit Metadata