elevenlabs-dubbing
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
infshcommand-line tool to perform dubbing, speech-to-text, and video captioning tasks as part of its core functionality. - [EXTERNAL_DOWNLOADS]: The documentation references an installation script for the
infshCLI hosted on the vendor's GitHub repository and provides commands to add related skills via a package manager (npx skills add). These resources originate from the official vendor infrastructure. - [PROMPT_INJECTION]: The skill defines an ingestion surface for untrusted data through audio and video URLs provided in the input parameters.
- Ingestion points:
audioandvideo_urlparameters in JSON inputs withinSKILL.md. - Boundary markers: Absent from the command examples.
- Capability inventory: Subprocess execution via the
infshCLI. - Sanitization: Not explicitly defined within the skill markdown body; the skill relies on the underlying platform for content validation.
Audit Metadata