Elevenlabs AI

PassAudited by ClawScan on May 1, 2026.

Overview

This is a documentation-only ElevenLabs API skill; the main things to handle carefully are API keys and sensitive audio.

This skill appears benign and documentation-only. Before using it, confirm you trust the publisher, use scoped ElevenLabs credentials or single-use tokens, avoid exposing keys in client-side or logged contexts, and be careful when sending sensitive audio or text to the provider.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

You have less information about who maintains the skill, but there is no packaged code shown that would run during install.

Why it was flagged

The skill has limited provenance information. This is only a note because the artifact set is documentation-only with no install script or executable code.

Skill content
Source: unknown
Homepage: none
Recommendation

Install only if you are comfortable with the publisher identity and review the included documentation before using it.

What this means

An ElevenLabs API key can authorize account usage and may consume quota or expose account access if mishandled.

Why it was flagged

The skill requires ElevenLabs credentials for its intended API use. This is expected for the service, but users should notice that credentials are involved.

Skill content
- API key (xi-api-key) or a single-use token when needed.
Recommendation

Use scoped or quota-limited keys where available, prefer single-use tokens for client-side access, and never paste keys into logs or shared chats.

What this means

Text, audio, transcripts, and generated outputs may be sent to or produced by ElevenLabs and could contain private information.

Why it was flagged

The artifacts explicitly recognize that audio handled by these workflows may contain sensitive personal information and that API keys need protection.

Skill content
- Audio content can include sensitive data; treat outputs as PII.
- Avoid client-side API key exposure.
Recommendation

Avoid sending highly sensitive audio unless necessary, review ElevenLabs retention/privacy settings, use zero-retention options where available, and restrict downstream sharing of generated audio.