music

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill integrates with ElevenLabs, a well-known AI services provider. All external references and downloads target the official ElevenLabs domain (elevenlabs.io) and their official package registries.
  • [CREDENTIALS_UNSAFE]: The skill follows security best practices by requiring the use of an environment variable (ELEVENLABS_API_KEY) for authentication. While it shows placeholders like "your-api-key" in documentation examples, it explicitly recommends environment variables as the preferred method.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text prompts to generate music. While this is an ingestion surface, the risk is inherently low for a music generation task. Furthermore, the documentation notes that the API includes safety filters for copyrighted or restricted content, providing prompt_suggestion alternatives when issues are detected.
  • [COMMAND_EXECUTION]: The provided code snippets involve standard API client initialization and file writing for audio output, which are appropriate for the skill's primary purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 06:31 PM