elevenlabs-voice-changer
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of the
belt-sh/clipackage and fetches configuration or installation instructions from a remote GitHub repository athttps://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md.- [REMOTE_CODE_EXECUTION]: The instructions utilize thebeltCLI tool to execute remote applications (e.g.,elevenlabs/voice-changer) on the inference.sh infrastructure.- [INDIRECT_PROMPT_INJECTION]: The skill processes audio content from external URLs, creating a surface for potential indirect prompt injection attacks where malicious content in the audio could influence the agent's behavior. - Ingestion points: Command input JSON fields (e.g.,
audio) inSKILL.mdexamples. - Boundary markers: None identified in the provided instructions.
- Capability inventory: Use of
Bash(belt *)to interact with remote processing services. - Sanitization: No validation or sanitization mechanisms for the input audio content are described.
Audit Metadata