fal-ai-media
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill integrates the
fal-ai-mcp-serverpackage vianpxto enable media generation capabilities. This is a standard installation method for the service.\n- [DATA_EXFILTRATION]: The skill includes a Python example that interacts with the ElevenLabs API (api.elevenlabs.io) for text-to-speech generation. It correctly advises using environment variables (ELEVENLABS_API_KEY) for authentication rather than hardcoding secrets.\n- [INDIRECT_PROMPT_INJECTION]: The skill takes user-provided prompts and text as input for media generation tools.\n - Ingestion points: User prompts in
generatetool calls and text input for speech synthesis.\n - Boundary markers: None explicitly defined in the skill instructions.\n
- Capability inventory: Performs network requests to external APIs and writes generated media files to the local disk.\n
- Sanitization: The skill relies on the safety filters and moderation systems of the integrated AI providers.
Audit Metadata