elevenlabs-ci-integration
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the GitHub CLI (
gh secret set) to manage environment secrets. This is a recommended security practice for CI/CD pipelines to ensure API keys are not hardcoded or exposed in plain text. - [DATA_EXPOSURE]: The skill uses
curlto check remaining character quotas from the official ElevenLabs API (api.elevenlabs.io). This is a legitimate health check and does not involve exfiltration to third parties. - [CREDENTIALS_UNSAFE]: The documentation provides placeholders for secrets (e.g.,
sk_your_test_key_here,whsec_your_secret_here) rather than actual hardcoded credentials. It explicitly instructs users to store real keys as GitHub Secrets. - [REMOTE_CODE_EXECUTION]: The skill uses standard GitHub Actions (
actions/checkout,actions/setup-node). These are well-known, trusted actions from the official GitHub organization and do not represent a security risk.
Audit Metadata