elevenlabs-tts
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
belt-sh/clipackage vianpxand theinferenceshPython package viapip. These are the official tools for the inference.sh service described in the skill. - [COMMAND_EXECUTION]: The skill uses the
beltCLI tool (restricted viaallowed-toolsto thebeltcommand only) to perform text-to-speech operations, manage sessions, and interact with the ElevenLabs API. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text for audio generation, which represents a surface for indirect prompt injection where instructions could be hidden in processed data.
- Ingestion points: The
textparameter in the input JSON objects inSKILL.md. - Boundary markers: The documentation uses standard JSON structures and shell-quoted strings to encapsulate user input.
- Capability inventory: The skill is limited to shell execution of the
beltcommand and network operations to the inference.sh API. - Sanitization: The skill assumes the underlying API handles sanitization of text inputs for the speech synthesis process.
Audit Metadata