elevenlabs-voice-changer

Pass

Audited by Gen Agent Trust Hub on Aug 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references installation instructions and documentation from the inference.sh GitHub repository to set up the required CLI tools.
  • [COMMAND_EXECUTION]: The skill uses the belt CLI tool to perform audio processing tasks. It follows security best practices by using the allowed-tools frontmatter to restrict the shell's execution scope to only commands starting with belt.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles external audio URLs provided as input for voice transformation.
  • Ingestion points: Audio URLs are passed within the --input JSON parameter of the belt command.
  • Boundary markers: Data is encapsulated within a structured JSON object.
  • Capability inventory: The skill uses the Bash tool to execute the vendor-provided belt binary.
  • Sanitization: Input is treated as a literal URL string passed to the underlying CLI application.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 17, 2026, 04:08 PM
Security Audit — agent-trust-hub — elevenlabs-voice-changer