text-to-speech
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python examples in
references/streaming.mdthat usesubprocess.Popento invokeffplayfor real-time audio playback. The command uses static arguments and accepts audio data via stdin, minimizing injection risks. - [EXTERNAL_DOWNLOADS]: The documentation recommends installing official packages from well-known registries: the
elevenlabspackage from PyPI and the@elevenlabs/elevenlabs-jspackage from NPM. - [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were identified. The skill correctly utilizes environment variables for sensitive credentials and communicates only with official ElevenLabs API endpoints.
Audit Metadata