elevenlabs-sound-effects
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is configured to execute the
infshCLI using theBashtool to perform sound generation tasks. - [EXTERNAL_DOWNLOADS]: The documentation references installation resources from the vendor's official GitHub repository (
https://raw.githubusercontent.com/inference-sh/skills/refs/heads/main/cli-install.md). - [PROMPT_INJECTION]: There is an attack surface for indirect prompt injection because the skill processes user-defined text descriptions for sound generation.
- Ingestion points: The
textparameter defined in the examples withinSKILL.mdis used to construct the input for theinfshapplication. - Boundary markers: There are no explicit delimiters or safety instructions provided to separate the user-provided text from the command structure.
- Capability inventory: The skill utilizes
Bash(infsh *)capabilities to execute system-level commands as specified inSKILL.md. - Sanitization: No input sanitization, escaping, or validation logic is specified in the skill's instructions.
Audit Metadata