elevenlabs-dubbing
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches content from external sources, specifically the inference-sh GitHub repository for installation instructions.
- Evidence: Reference to
https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.mdand instructions to install thebelt-sh/cliskill vianpx. - [COMMAND_EXECUTION]: The skill documents the use of the
beltCLI tool for authenticating and running dubbing applications. - Evidence: Usage of
belt loginandbelt app run elevenlabs/dubbingcommands throughout the SKILL.md examples. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data in the form of audio and video URLs which are passed to the ElevenLabs dubbing engine. This is a standard input surface for the intended media translation purpose.
- Ingestion points:
audioandvideo_urlfields in the JSON input for thebeltcommands (SKILL.md). - Boundary markers: The input is structured as JSON, which provides clear boundaries for data values.
- Capability inventory: The skill uses shell commands via the
Bash(belt *)tool to execute remote applications. - Sanitization: Not explicitly implemented in the skill documentation, relying on the underlying
beltCLI and ElevenLabs engine safety filters.
Audit Metadata