elevenlabs-dialogue
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation instructions and additional skill components from the vendor's GitHub repository (inference-sh). These external references are standard for the deployment and operation of the vendor's specialized audio tools.
- [COMMAND_EXECUTION]: Employs the
infshcommand-line interface to interact with audio generation services. This tool execution is appropriately scoped within the skill's frontmatter configuration. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes text segments which may originate from untrusted data sources.
- Ingestion points: The
segmentsarray in the JSON input for theinfshtool described inSKILL.md. - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potential commands embedded within the text segments.
- Capability inventory: The skill uses the
Bashtool to run theinfshCLI across multiple examples inSKILL.md. - Sanitization: No evidence of sanitization, escaping, or validation of the input text is performed before it is passed to the generation command.
Audit Metadata