elevenlabs-music
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a remote installation script for the
infshCLI located athttps://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md. This is the official source for the tool required by the skill. - [COMMAND_EXECUTION]: Uses the
infshCLI tool viaBashto interact with the ElevenLabs API. Theallowed-toolsconfiguration correctly restricts the shell execution environment to theinfshcommand. - [DATA_EXPOSURE]: Inputs are passed to the CLI using structured JSON via the
--inputflag, which follows best practices for preventing argument injection when handling user-provided strings like music prompts.
Audit Metadata