elevenlabs-stt
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
belt-sh/cliand references a remote installation script from the inference-sh GitHub repository. These components are necessary for the skill's documented functionality.\n- [COMMAND_EXECUTION]: The skill uses thebeltcommand-line tool via Bash to perform audio transcription and forced alignment. Access is restricted using theallowed-toolsfield to only thebeltcommand, following the principle of least privilege.\n- [PROMPT_INJECTION]: The skill processes untrusted audio files from external URLs and user-supplied text for alignment, which constitutes an indirect prompt injection surface.\n - Ingestion points: Audio URLs and alignment text provided in the
--inputJSON payload for thebelttool inSKILL.md.\n - Boundary markers: The skill does not define specific delimiters or instructions for the agent to ignore potential commands embedded within the transcribed audio output.\n
- Capability inventory: The skill is permitted to execute the
beltCLI tool via Bash to perform transcription and alignment tasks.\n - Sanitization: Transcribed text is passed back to the agent context without explicit sanitization or filtering of the content.
Audit Metadata