elevenlabs-sound-effects
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill primarily serves as documentation for using the
infshCLI to access sound generation services. All commands and URLs are associated with the vendor's official domains and repositories. - [COMMAND_EXECUTION]: The skill uses the
infshtool to execute applications on the vendor's platform. These operations are within the scope defined in theallowed-toolsconfiguration. - [EXTERNAL_DOWNLOADS]: The documentation links to installation instructions hosted on the vendor's GitHub repository (
inference-sh/skills). This is a legitimate reference for setting up the required CLI environment. - [PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection as it processes user-supplied text descriptions to generate audio.
- Ingestion points: The
textparameter in theinfsh app runcommand withinSKILL.md. - Boundary markers: None present in the provided examples.
- Capability inventory: Subprocess execution via the
infshCLI tool. - Sanitization: No explicit sanitization or input validation is described in the markdown documentation.
Audit Metadata