elevenlabs-stt
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and encourages the installation of the
belt-sh/clitool vianpxand fetches installation guidance from the vendor's GitHub repository athttps://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md. These resources originate from the associated service provider for the skill's functionality. - [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
beltCLI. These commands include authentication (belt login) and application execution (belt app run) to perform audio processing tasks. This behavior is confined to the scope defined in theallowed-toolsfrontmatter. - [INDIRECT_PROMPT_INJECTION]: The skill processes external audio and video content via URLs. This represents an attack surface where malicious instructions embedded in audio could potentially influence the agent's behavior during transcription or in downstream tasks like caption generation.
- Ingestion points: The
audioinput parameter inbelt app runcommands (SKILL.md). - Boundary markers: None explicitly defined in the provided bash commands or instructions.
- Capability inventory: Shell command execution via the
beltCLI tool (SKILL.md). - Sanitization: No explicit sanitization of transcribed text before it is used in downstream workflows (e.g., passing to
infsh/caption-videos) is documented.
Audit Metadata