elevenlabs-security-basics
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on defensive security practices and does not contain malicious patterns.
- It provides a git pre-commit hook implementation designed to prevent the accidental commitment of ElevenLabs API keys to source control by scanning for the
sk_prefix. - The webhook verification logic in
references/implementation.mdcorrectly implements HMAC-SHA256 signature validation withcrypto.timingSafeEqualto prevent timing attacks and includes a 5-minute timestamp check for replay protection. - Environment variable usage for secrets and the inclusion of
.envin.gitignorefollow standard security recommendations for secret management.
Audit Metadata