elevenlabs-stt
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
beltCLI tool and installation scripts hosted on GitHub (github.com/inference-sh) and theinference.shplatform. These are standard dependencies for the service's functionality. - [COMMAND_EXECUTION]: The skill is configured to use the
beltcommand-line interface via Bash for processing audio transcription requests. The scope is restricted to thebelttool as defined in theallowed-toolsfrontmatter. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8) as it processes transcription output from external audio files. However, this is inherent to speech-to-text services, and no high-risk capabilities are directly exposed to the untrusted output without agent mediation.
- [DATA_EXFILTRATION]: Audio data URLs are transmitted to the
inference.shAPI for processing. This is the intended primary purpose of the skill and does not involve sensitive local file access or unauthorized data transfer.
Audit Metadata