client-comms-studio
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The script
scripts/elevenlabs_tts.pytransmits text data toapi.elevenlabs.ioto generate audio. This network operation targets the official API of a well-known service and is a core component of the skill's functionality. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by retrieving the
ELEVENLABS_API_KEYfrom environment variables rather than hardcoding it in the source code or instructions. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process potentially untrusted external content such as client emails and chat logs. However, the risk is mitigated as the skill's primary purpose is drafting responses, and it lacks high-privilege capabilities that could be exploited by embedded instructions.
Audit Metadata