elevenlabs-agents

Warn

Audited by Runlayer on Mar 1, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
88%
Files
21
Flagged
6
Chunks
22
Flagged Files (6)
elevenlabs-agents/scripts/simulate-conversation.shMEDIUM
88.2%

Malicious tool definition detected

Edit $SIMULATION_FILE and run again." exit 0 fi echo "Running conversation simulation..." echo "Agent ID: $AGENT_ID" echo "Simulation file: $SIMULATION_FILE" # Run simulation curl -X POST "https://api.elevenlabs.io/v1/convai/agents/$AGENT_ID/simulate" \ -H "xi-api-key: $ELEVENLABS_API_KEY" \ -H "Content-Type: application/json" \ -d @"$SIMULATION_FILE" | jq .

elevenlabs-agents/scripts/create-agent.shMEDIUM
77.4%

Malicious tool definition detected

-f "agents.json" ]; then echo "Initializing project..." elevenlabs agents init fi # Create agent echo "Creating agent: $AGENT_NAME" elevenlabs agents add "$AGENT_NAME" --template "$TEMPLATE" # Push to platform echo "Deploying to environment: $ENV" elevenlabs agents push --env "$ENV" echo "✓ Agent created successfully!" echo "Edit configuration in: agent_configs/" echo "Test with: elevenlabs agents test \"$AGENT_NAME\""

elevenlabs-agents/scripts/test-agent.shLOW
74.0%

Malicious tool definition detected

Please login:" elevenlabs auth login fi # Push tests to platform if [ -f "tests.json" ]; then echo "Deploying tests..." elevenlabs tests push fi # Run agent tests echo "Running tests for: $AGENT_NAME" elevenlabs agents test "$AGENT_NAME" echo "✓ Tests completed!"

elevenlabs-agents/references/compliance-guide.mdLOW
73.6%

Malicious tool definition detected

```json { "privacy": { "zero_retention": true } } ``` **Limitations**: - No conversation history - No analytics - No post-call webhooks - No MCP tool integrations --- ## PCI DSS (Payment Card Industry) ### Never: ❌ Store credit card numbers in conversation logs ❌ Send credit card data to LLM ❌ Log CVV or PIN numbers ### Always: ✅ Use PCI-compliant payment processors (Stripe, PayPal) ✅ Tokenize payment data ✅ Use DTMF keypad for card entry (telephony) ### Example: Secure Payment Collection ```jso

elevenlabs-agents/scripts/deploy-agent.shLOW
71.5%

Malicious tool definition detected

# Dry run first to show changes echo "Preview of changes for $ENV:" if [ -n "$AGENT_NAME" ]; then elevenlabs agents push --env "$ENV" --agent "$AGENT_NAME" --dry-run else elevenlabs agents push --env "$ENV" --dry-run fi # Confirm deployment read -p "Deploy to $ENV?

elevenlabs-agents/assets/ci-cd-example.ymlLOW
51.5%

Tool passed security scan

Passed Files (15)Click to expand
elevenlabs-agents/references/system-prompt-guide.mdOK
49.2%

Tool passed security scan

elevenlabs-agents/SKILL.mdOK
40.9%

Tool passed security scan

elevenlabs-agents/references/testing-guide.mdOK
33.2%

Tool passed security scan

elevenlabs-agents/references/cost-optimization.mdOK
27.5%

Tool passed security scan

elevenlabs-agents/assets/javascript-sdk-boilerplate.jsOK
23.0%

Tool passed security scan

elevenlabs-agents/assets/system-prompt-template.mdOK
20.1%

Tool passed security scan

elevenlabs-agents/references/api-reference.mdOK
13.2%

Tool passed security scan

elevenlabs-agents/assets/react-native-boilerplate.tsxOK
11.2%

Tool passed security scan

elevenlabs-agents/references/workflow-examples.mdOK
11.0%

Tool passed security scan

elevenlabs-agents/assets/agent-config-schema.jsonOK
8.7%

Tool passed security scan

elevenlabs-agents/references/cli-commands.mdOK
7.9%

Tool passed security scan

elevenlabs-agents/assets/swift-sdk-boilerplate.swiftOK
6.7%

Tool passed security scan

elevenlabs-agents/assets/react-sdk-boilerplate.tsxOK
6.7%

Tool passed security scan

elevenlabs-agents/assets/widget-embed-template.htmlOK
4.1%

Tool passed security scan

elevenlabs-agents/references/tool-examples.mdOK
3.4%

Tool passed security scan

Audit Metadata
Max File Score
88%
Classification
KNOWN_SERVER_ALL_UNKNOWN
Files Scanned
21
Files Flagged
6
Chunks Analyzed
22
Analyzed
Mar 1, 2026, 10:38 PM
Security Audit — runlayer — elevenlabs-agents