skills/jeremylongshore/tons-of-skills-marketplace/elevenlabs-reference-architecture/Gen Agent Trust Hub
elevenlabs-reference-architecture
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The reference architecture correctly manages the ElevenLabs API key using environment variables (
process.env.ELEVENLABS_API_KEY) rather than hardcoding secrets in the implementation. - [INDIRECT_PROMPT_INJECTION]: The skill defines a service architecture that ingests untrusted text data for audio generation.
- Ingestion points: The
generateandgenerateLongTextmethods insrc/services/tts-service.ts(as shown inreferences/implementation.md) ingest arbitrary text strings for processing. - Boundary markers: The reference code does not demonstrate the use of specific boundary markers or delimiters for the text payload.
- Capability inventory: The architecture includes network capabilities (ElevenLabs API communication) and file handling (audio buffer generation).
- Sanitization: The implementation walkthrough provides a basic functional scaffold without explicit input sanitization or filtering logic, which is an inherent surface for indirect prompt injection common to text-to-speech services.
Audit Metadata