elevenlabs
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill implements secure API key handling by utilizing environment variables or a local configuration file with restricted file permissions (
chmod 600). - [EXTERNAL_DOWNLOADS]: Technical documentation and API schemas are retrieved from the vendor's official domain (
pixazo.ai). - [COMMAND_EXECUTION]: The skill provides standard implementation examples using
curland established libraries to interact with the Pixazo API gateway. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided text for audio generation. Ingestion points: User-provided text for the
promptparameter (SKILL.md). Boundary markers: Absent. Capability inventory: NetworkPOSTrequests togateway.pixazo.ai(SKILL.md). Sanitization: Absent. The risk is considered safe as the data is only used to populate a text field for a specific authenticated API call.
Audit Metadata