elevenlabs-voice-changer
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the
belt-sh/clitool and fetches setup instructions from the official inference-sh GitHub repository. - [INDIRECT_PROMPT_INJECTION]: The skill processes external audio files via URLs provided by the user, creating a surface where content within those files could potentially influence agent behavior.
- Ingestion points: External audio URLs are ingested via the
--inputparameter inbeltcommand examples withinSKILL.md. - Boundary markers: None present; the skill instructs the agent to pass user-provided URLs directly to the transformation tool.
- Capability inventory: The skill is limited to the
beltcommand using theBashtool, as specified in the frontmatter'sallowed-tools. - Sanitization: No sanitization or validation of the remote audio source is specified in the skill instructions; it relies on the platform's CLI tool for secure handling.
Audit Metadata