elevenlabs-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to gather diagnostic information, including
curlfor API connectivity checks,digfor DNS lookups,opensslfor TLS verification, andtarfor bundle creation. It also usesnpm listandpip showto verify SDK installations. - [DATA_EXPOSURE]: The skill accesses sensitive local files, specifically
.envand application logs (*.log). It attempts to mitigate the risk of accidental exposure by implementing automated redaction usingsed, which masks all environment variable values and ElevenLabs API key patterns (sk_*) before they are written to the output bundle. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from local log files, which creates a surface where malicious instructions embedded in logs could theoretically influence the agent during the collection process.
- Ingestion points: Ingests contents of
*.logfiles in the current working directory (references/implementation.md). - Boundary markers: None; raw log lines matching the grep filter are appended to the error report.
- Capability inventory: The skill has access to shell execution, network probing via
curl, and package management tools (node,pip,npm) as specified in the implementation script. - Sanitization: Includes automated redaction of API keys and environment values using
sedpatterns.
Audit Metadata