elevenlabs-sdk-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for functions that convert text to speech. If these functions are used to process untrusted external data in a production environment, they represent an injection surface where maliciously crafted text could attempt to influence the audio generation output.
- Ingestion points: The
textproperty in theTTSOptionsinterface withinsrc/elevenlabs/tts-service.tsand thetextparameter in thegenerate_speechfunction withinelevenlabs_service.py. - Boundary markers: None are included in the code snippets to distinguish between instructions and data.
- Capability inventory: The patterns include capabilities to write generated audio data to the local file system using
fs.createWriteStream(TypeScript) andopen(output_path, 'wb')(Python). - Sanitization: No text sanitization or validation logic is included in the provided code templates.
Audit Metadata