elevenlabs-stt
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate tool for speech-to-text transcription and alignment, providing instructions on how to use ElevenLabs models via a dedicated platform CLI.
- [COMMAND_EXECUTION]: The skill utilizes the
beltcommand-line utility for transcription tasks. Theallowed-toolsconfiguration in the skill's frontmatter correctly restricts the agent's execution capabilities to thebeltcommand, adhering to the principle of least privilege. - [EXTERNAL_DOWNLOADS]: The skill references installation guidelines and related platform skills hosted on GitHub under the
inference-shorganization. These are standard dependencies required for the skill's intended functionality and originate from well-known service repositories. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it is designed to process untrusted external audio and video content.
- Ingestion points: Audio and video URLs provided as inputs to the
beltCLI commands (SKILL.md). - Boundary markers: None explicitly defined in the instructions; the skill relies on the CLI's handling of the input.
- Capability inventory: The skill executes shell commands using the
beltCLI to perform inference (SKILL.md). - Sanitization: Inputs are passed as structured JSON objects to the
beltcommand, which is a standard method for preventing simple injection attacks.
Audit Metadata