elevenlabs

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script uses subprocess.run to call the system's ffmpeg binary for concatenating audio files. This is a legitimate and standard use of the tool for audio processing.
  • Evidence in scripts/elevenlabs.py shows the command is constructed using a list of arguments (["ffmpeg", "-y", ... ]), which follows security best practices to prevent shell injection.
  • The input to ffmpeg is a temporary list file containing paths to locally generated temporary MP3 chunks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:59 AM