elevenlabs
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill implements a custom security module,
_pathguard.py, which ensures that all file output operations are restricted to the workspace root or system temporary directories. This effectively mitigates path traversal and unauthorized file write risks. - [COMMAND_EXECUTION]: The skill utilizes system utilities
ffmpegandafplayfor audio manipulation and playback. These are invoked using safesubprocess.runpatterns with list-based arguments, and all file paths passed to these commands are first validated by the path guard. - [EXTERNAL_DOWNLOADS]: Network activity is restricted to the official ElevenLabs API endpoints. External dependencies like the
requestslibrary and theffmpegbinary are standard tools for the skill's purpose and are correctly documented in the setup instructions. - [SAFE]: Voice cloning functionality includes a dedicated path resolver,
_resolve_sample_path, which prevents the skill from reading arbitrary files by restricting audio sample access to a specific, configurable samples directory.
Audit Metadata