ElevenLabs Music
PassAudited by ClawScan on May 1, 2026.
Overview
This skill does what it says: it uses an ElevenLabs API key to generate music from a prompt and save the result locally.
This appears safe and purpose-aligned for generating music with ElevenLabs. Before installing, make sure you are comfortable providing an ElevenLabs API key, sending prompts to ElevenLabs, and using uv to resolve the listed Python dependencies.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Music generation may consume paid ElevenLabs quota or incur account usage under the configured API key.
The script uses the user's ElevenLabs API key to access a paid provider account, which is expected for this music generation skill but gives the skill account-linked authority.
api_key = os.getenv("ELEVENLABS_API_KEY")
client = ElevenLabs(api_key=api_key)Use a dedicated or revocable ElevenLabs API key if possible, and monitor account usage.
Future runs could use newer dependency versions than the author originally tested.
The uv-run script declares package dependencies that are not fully pinned. This is purpose-aligned, but package resolution may change over time.
dependencies = [ # "elevenlabs>=1.0.0", # "python-dotenv", # ]
If reproducibility matters, pin dependency versions before use or run in a controlled Python environment.
Any text placed in the music prompt is shared with ElevenLabs for generation.
The user's prompt is sent to the ElevenLabs music API. This is necessary for the skill's function and is disclosed by the skill description.
audio_chunks = client.music.compose(
prompt=prompt,
music_length_ms=length_ms,
force_instrumental=instrumental,
)Avoid including private, confidential, or sensitive personal information in prompts unless you are comfortable sending it to ElevenLabs.