agents
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The instructions provide commands to install and execute the ElevenLabs CLI tool (
@elevenlabs/cli) globally via npm to manage agent configurations, authentication, and deployment. - [EXTERNAL_DOWNLOADS]: The documentation for widget embedding includes a script reference to fetch the ElevenLabs conversation widget from the unpkg.com content delivery network.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of voice agents that ingest untrusted user speech and text. These agents have the capability to trigger webhooks and client-side JavaScript tools, creating a surface for potential instruction injection via user data.
- Ingestion points: User transcripts and conversation audio processed in real-time (documented in
SKILL.mdandreferences/agent-configuration.md). - Boundary markers: The configuration documentation in
references/agent-configuration.mddetails available guardrails and safety settings to mitigate malicious inputs. - Capability inventory: Agents can execute server-side webhooks (POST/GET), browser-side client tools, and initiate outbound phone calls (documented in
references/client-tools.mdandreferences/outbound-calls.md). - Sanitization: The skill supports a
sanitizeoption for dynamic variables to remove sensitive values from tool responses before they are processed by the agent (documented inreferences/outbound-calls.md).
Audit Metadata