setup-api-key
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to api.elevenlabs.io to validate provided keys. This is a well-known service associated with the skill's functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided text to configure the environment. 1. Ingestion points: User input in Step 2. 2. Boundary markers: Absent. 3. Capability inventory: Network GET requests and file-writing to .env. 4. Sanitization: Absent. This surface is necessary for the skill's primary configuration purpose.
Audit Metadata