elevenlabs-agents

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches official SDKs and CLI tools from the @elevenlabs organization on NPM and provides templates for embedding a script widget from elevenlabs.io.
  • [DATA_EXFILTRATION]: Documents the use of webhooks for handling post-call data. Correctly recommends implementing HMAC SHA-256 signature verification to ensure the authenticity and integrity of incoming webhook payloads.
  • [CREDENTIALS_UNSAFE]: Demonstrates secure credential management by instructing users to use environment variables and signed URLs for client-side authentication, which effectively prevents the exposure of sensitive API keys in public-facing code.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 01:52 PM
Security Audit — agent-trust-hub — elevenlabs-agents