elevenlabs-tts
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation, setup guides, and image assets from the vendor's official infrastructure, including the
inference.shdomain and theinference-sh/skillsGitHub repository. These are recognized as legitimate vendor resources. - [COMMAND_EXECUTION]: The instructions involve the use of the
beltCLI tool for authentication and application execution. The commands are standard for the tool's intended purpose and are scoped to the vendor's ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill serves as a processing point for user-supplied text to be converted into speech, creating a potential surface for indirect injection.
- Ingestion points: Text input passed to the
belt app runcommand via the--inputJSON parameter inSKILL.mdexamples. - Boundary markers: The input is encapsulated within structured JSON objects, providing logical separation between data and command parameters.
- Capability inventory: The skill uses the
Bashtool to execute thebeltCLI for speech generation. - Sanitization: Input sanitization or filtering of the text content is not explicitly described in the skill documentation.
Audit Metadata