elevenlabs-voice-changer

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of the belt-sh/cli tool and fetches setup instructions from the official inference-sh GitHub repository.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external audio files via URLs provided by the user, creating a surface where content within those files could potentially influence agent behavior.
  • Ingestion points: External audio URLs are ingested via the --input parameter in belt command examples within SKILL.md.
  • Boundary markers: None present; the skill instructs the agent to pass user-provided URLs directly to the transformation tool.
  • Capability inventory: The skill is limited to the belt command using the Bash tool, as specified in the frontmatter's allowed-tools.
  • Sanitization: No sanitization or validation of the remote audio source is specified in the skill instructions; it relies on the platform's CLI tool for secure handling.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 05:10 PM
Security Audit — agent-trust-hub — elevenlabs-voice-changer