elevenlabs-sound-effects

Pass

Audited by Gen Agent Trust Hub on Mar 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is configured to execute the infsh CLI using the Bash tool to perform sound generation tasks.
  • [EXTERNAL_DOWNLOADS]: The documentation references installation resources from the vendor's official GitHub repository (https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md).
  • [PROMPT_INJECTION]: There is an attack surface for indirect prompt injection because the skill processes user-defined text descriptions for sound generation.
  • Ingestion points: The text parameter defined in the examples within SKILL.md is used to construct the input for the infsh application.
  • Boundary markers: There are no explicit delimiters or safety instructions provided to separate the user-provided text from the command structure.
  • Capability inventory: The skill utilizes Bash(infsh *) capabilities to execute system-level commands as specified in SKILL.md.
  • Sanitization: No input sanitization, escaping, or validation logic is specified in the skill's instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 19, 2026, 07:33 AM