text-to-speech

Pass

Audited by Gen Agent Trust Hub on Mar 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes Python examples in references/streaming.md that use subprocess.Popen to invoke ffplay for real-time audio playback. The command uses static arguments and accepts audio data via stdin, minimizing injection risks.
  • [EXTERNAL_DOWNLOADS]: The documentation recommends installing official packages from well-known registries: the elevenlabs package from PyPI and the @elevenlabs/elevenlabs-js package from NPM.
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were identified. The skill correctly utilizes environment variables for sensitive credentials and communicates only with official ElevenLabs API endpoints.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 22, 2026, 10:50 PM
Security Audit — agent-trust-hub — text-to-speech