elevenlabs-dialogue

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the belt CLI via the Bash tool to run dialogue generation apps such as elevenlabs/text-to-dialogue.
  • [EXTERNAL_DOWNLOADS]: The skill instructions include the installation of the belt-sh/cli package and link to installation documentation hosted on the inference-sh GitHub repository.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text strings to generate audio, creating a surface for indirect prompt injection where instructions could be embedded in the dialogue text.
  • Ingestion points: The segments array within the JSON input provided to the belt command in SKILL.md examples.
  • Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the dialogue templates.
  • Capability inventory: The skill utilizes the Bash tool to execute local CLI commands.
  • Sanitization: No sanitization or validation of the input text is described in the documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 02:20 PM
Security Audit — agent-trust-hub — elevenlabs-dialogue