elevenlabs-agents
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several official packages from the ElevenLabs NPM scope for integration and management.
- Evidence: Mentions
@elevenlabs/react,@elevenlabs/client,@elevenlabs/react-native,@elevenlabs/elevenlabs-js, and@elevenlabs/agents-clifor local development. - [COMMAND_EXECUTION]: Provides administrative shell scripts for automating agent development workflows.
- Evidence:
scripts/create-agent.sh,scripts/deploy-agent.sh, andscripts/test-agent.shutilize the official ElevenLabs CLI for project initialization and deployment. - [PROMPT_INJECTION]: Documentation includes extensive templates and frameworks for system prompts designed to define agent behavior and security boundaries.
- Evidence:
assets/system-prompt-template.mdandreferences/system-prompt-guide.mdprovide structured components (Personality, Guardrails, Goals) to prevent unwanted agent behavior. - [SAFE]: The skill incorporates security-first architecture for production deployments.
- Evidence: The 'Signed URLs' pattern in
SKILL.mdensures that sensitive API keys are never exposed in client-side code, using server-side authentication proxies instead.
Audit Metadata