elevenlabs-sound-effects

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and points to installation instructions hosted on the official GitHub repository for the inference-sh organization.
  • [COMMAND_EXECUTION]: Utilizes the Bash tool to execute the belt CLI for logging in and running sound effect generation apps.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided text descriptions to generate audio, which serves as an ingestion point for potentially malicious instructions.
  • Ingestion points: The text parameter in SKILL.md which is interpolated into the belt app run command.
  • Boundary markers: No delimiters or safety instructions are provided to the agent to treat the text input as untrusted data.
  • Capability inventory: The skill uses the Bash tool to execute external CLI commands.
  • Sanitization: There is no evidence of input validation or sanitization for the sound description text before it is passed to the shell.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 02:20 PM
Security Audit — agent-trust-hub — elevenlabs-sound-effects