ElevenLabs Music

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: elevenlabs-music Version: 1.0.1 The skill bundle is benign. The `SKILL.md` provides clear instructions for using the music generation feature and does not contain any prompt injection attempts against the agent. The `scripts/generate_music.py` script correctly uses the ElevenLabs API to generate music based on user input, saves the output to a local file (defaulting to `/tmp/music.mp3`), and handles API key and plan requirements. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation. All dependencies are legitimate and relevant to the stated purpose.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI03: Identity and Privilege Abuse

What this means

Music generation may consume paid ElevenLabs quota or incur account usage under the configured API key.

Why it was flagged

The script uses the user's ElevenLabs API key to access a paid provider account, which is expected for this music generation skill but gives the skill account-linked authority.

Skill content

api_key = os.getenv("ELEVENLABS_API_KEY")
client = ElevenLabs(api_key=api_key)

Recommendation

Use a dedicated or revocable ElevenLabs API key if possible, and monitor account usage.

Note

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Future runs could use newer dependency versions than the author originally tested.

Why it was flagged

The uv-run script declares package dependencies that are not fully pinned. This is purpose-aligned, but package resolution may change over time.

Skill content

dependencies = [
#     "elevenlabs>=1.0.0",
#     "python-dotenv",
# ]

Recommendation

If reproducibility matters, pin dependency versions before use or run in a controlled Python environment.

Note

ASI07: Insecure Inter-Agent Communication

What this means

Any text placed in the music prompt is shared with ElevenLabs for generation.

Why it was flagged

The user's prompt is sent to the ElevenLabs music API. This is necessary for the skill's function and is disclosed by the skill description.

Skill content

audio_chunks = client.music.compose(
    prompt=prompt,
    music_length_ms=length_ms,
    force_instrumental=instrumental,
)

Recommendation

Avoid including private, confidential, or sensitive personal information in prompts unless you are comfortable sending it to ElevenLabs.