elevenlabs-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curl,openssl,grep, andsedwithin a bash script to perform diagnostic checks and redact sensitive data. These commands are localized to the user's environment and target official ElevenLabs API endpoints (api.elevenlabs.io). - [DATA_EXPOSURE_&_EXFILTRATION]: While the skill collects configuration and logs, it implements active redaction strategies using
sedto maskELEVENLABS_API_KEYand other sensitive.envvalues before saving them to the debug bundle. The diagnostic output is intended for manual review by the user before submission to support. - [REMOTE_CODE_EXECUTION]: The skill provides a TypeScript implementation that uses the official
@elevenlabs/elevenlabs-jsSDK. This is a standard integration for debugging within a Node.js environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes local log files and API responses to generate reports. It uses boundary markers and redaction logic to ensure that sensitive data is not leaked into the diagnostic bundle. The risk of injection via log files is minimal as the output is treated as diagnostic data, not as executable instructions.
Audit Metadata