elevenlabs-agents
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches official SDKs and CLI tools from the @elevenlabs organization on NPM and provides templates for embedding a script widget from elevenlabs.io.
- [DATA_EXFILTRATION]: Documents the use of webhooks for handling post-call data. Correctly recommends implementing HMAC SHA-256 signature verification to ensure the authenticity and integrity of incoming webhook payloads.
- [CREDENTIALS_UNSAFE]: Demonstrates secure credential management by instructing users to use environment variables and signed URLs for client-side authentication, which effectively prevents the exposure of sensitive API keys in public-facing code.
Audit Metadata