elevenlabs-voice-changer
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation documentation includes a shell script installer command (
curl | sh) that fetches and executes a setup script from the official ElevenLabs GitHub repository for their CLI tool. - [EXTERNAL_DOWNLOADS]: The skill downloads official dependencies from NPM and PyPI registries and references audio samples hosted on Google Cloud Storage for demonstration purposes.
- [COMMAND_EXECUTION]: Instructions guide the user to execute commands for package managers such as
npm,pip,brew, andscoop, as well as theelevenlabsCLI for performing audio conversions. - [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface for indirect instructions by processing audio data from external sources.
- Ingestion points: Untrusted audio data is ingested through local file paths (
source.mp3) and remote URLs specified inSKILL.mdexamples. - Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between audio processing data and its own operational instructions.
- Capability inventory: The skill possesses capabilities to write files to the local system, execute shell commands via the CLI, and perform network operations to the ElevenLabs API.
- Sanitization: There is no evidence of sanitization, filtering, or validation of audio content prior to processing.
Audit Metadata