setup-api-key
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides clear instructions for users to obtain an API key from the official ElevenLabs website and performs validation against the service's own API endpoint.
- [DATA_EXPOSURE]: The skill manages the ELEVENLABS_API_KEY by reading from and writing to a local .env file and environment variables. This is a standard and recommended practice for managing application secrets.
- [EXTERNAL_DOWNLOADS]: Network requests are restricted to api.elevenlabs.io. This is a well-known service directly related to the skill's stated purpose of ElevenLabs API configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user input (the API key) to be used in authentication headers. While this is an ingestion point for external data, the risk is mitigated by the specific usage for a validation check and local storage without further processing of the input's content.
Audit Metadata