elevenlabs-voice-changer
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation instructions and documentation from the inference.sh GitHub repository to set up the required CLI tools.
- [COMMAND_EXECUTION]: The skill uses the
beltCLI tool to perform audio processing tasks. It follows security best practices by using theallowed-toolsfrontmatter to restrict the shell's execution scope to only commands starting withbelt. - [INDIRECT_PROMPT_INJECTION]: The skill handles external audio URLs provided as input for voice transformation.
- Ingestion points: Audio URLs are passed within the
--inputJSON parameter of thebeltcommand. - Boundary markers: Data is encapsulated within a structured JSON object.
- Capability inventory: The skill uses the Bash tool to execute the vendor-provided
beltbinary. - Sanitization: Input is treated as a literal URL string passed to the underlying CLI application.
Audit Metadata