elevenlabs-music
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified. The skill performs its intended function of music generation using established APIs.
- [DATA_EXPOSURE]: The skill correctly handles the ELEVENLABS_API_KEY through environment variables, avoiding hardcoded secrets and following best practices for credential security.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided prompts for music generation. While these are passed directly to the API, the scope of the tool is limited to audio output, posing no significant security risk. (1) Ingestion points: The 'prompt' argument in scripts/generate_music.py. (2) Boundary markers: Absent. (3) Capability inventory: Writing audio files to the file system and network access to the ElevenLabs API. (4) Sanitization: Absent.
Audit Metadata