music
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official ElevenLabs Python package (
elevenlabs) and Node.js package (@elevenlabs/elevenlabs-js). These are legitimate software development kits provided by the service vendor. - [DATA_EXFILTRATION]: Network operations are directed exclusively to the official ElevenLabs API endpoint (
api.elevenlabs.io) for music generation tasks. No unauthorized data transmission was detected. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided text prompts to generate music. This is the primary intended functionality of the skill. The documentation notes that the backend API includes content restrictions to prevent the use of copyrighted material, which acts as a safety control for the input.
- [CREDENTIALS_UNSAFE]: The skill correctly advises users to store the
ELEVENLABS_API_KEYin environment variables. Code examples use standard placeholders for API keys rather than hardcoding actual secrets.
Audit Metadata