elevenlabs

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements secure credential management by instructing users to store the API key in a .env file and accessing it via standard environment variable calls (os.getenv).- [SAFE]: All network requests are directed to the official ElevenLabs API, which is a well-known and reputable service for audio synthesis tasks.- [SAFE]: File system interactions are limited to reading and writing audio files (e.g., MP3) and synchronization manifests (JSON), which is necessary for the skill's stated purpose of creating audio content.- [SAFE]: The skill references local project-specific scripts (tools/voiceover.py) for workflow automation, which is standard for developer-oriented tools and does not involve downloading or executing code from untrusted remote sources.- [SAFE]: The skill ingests text for audio generation; however, the impact of potential indirect prompt injection is mitigated by the specific nature of the output (audio synthesis) and the lack of high-privilege capabilities connected to the text processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 04:37 AM