sound-effects
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation refers to the installation of official libraries including the
elevenlabsPython package and the@elevenlabs/elevenlabs-jsNode.js package from their respective registries. It also includes examples of interacting with the official ElevenLabs API endpoint athttps://api.elevenlabs.io. These are expected components for the skill's stated purpose.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input through a text-to-audio conversion pipeline. 1. Ingestion points: User-provided strings are passed to thetextparameter in the convert method withinSKILL.md. 2. Boundary markers: The skill does not implement delimiters or specific instructions to ignore embedded content within the prompt. 3. Capability inventory: The skill uses standard file writing operations to save output to the local disk, as seen in the Python and JavaScript examples inSKILL.md. 4. Sanitization: No explicit sanitization is performed on the user-supplied text before transmission to the remote service.
Audit Metadata