setup-api-key
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill instructs the agent to validate API keys by making a GET request to
api.elevenlabs.io. This is the official endpoint for a well-known AI service and is standard behavior for a configuration utility. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests user-provided text to be saved as an environment variable. However, it implements validation steps and follows best practices for credential management.
- [COMMAND_EXECUTION]: The skill manages environment variables by reading from and writing to the local
.envfile. This is a standard and safe method for local configuration management.
Audit Metadata