elevenlabs-core-workflow-b
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill documentation and implementation correctly instruct the user to provide API keys via environment variables (ELEVENLABS_API_KEY) rather than hardcoding them into the scripts.- [EXTERNAL_DOWNLOADS]: Utilizes the official '@elevenlabs/elevenlabs-js' Node.js package, which is the standard SDK provided by the service vendor.- [COMMAND_EXECUTION]: Shell commands (npm, curl) used within the skill are restricted to their intended purposes of dependency management and making API requests to the official 'api.elevenlabs.io' endpoint.- [DATA_EXFILTRATION]: Audio data and text descriptions are sent only to the legitimate ElevenLabs API for processing as part of the skill's primary function.
Audit Metadata