ElevenLabs Open Account

PassAudited by ClawScan on May 1, 2026.

Overview

This is an instruction-only ElevenLabs signup/API-key guide with no code or install behavior, but users should notice the disclosed affiliate signup link and handle any API key carefully.

Before installing, note that the signup link is an affiliate link and that any ElevenLabs API key you create should be treated like a password. The artifacts do not contain code or hidden install behavior, and the API-key guidance is aligned with the skill's stated purpose.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the link may credit someone for the referral, though it does not by itself grant the skill access to the user's account.

Why it was flagged

The signup path uses an affiliate/referral URL. It is clearly disclosed, so this is not deceptive, but users should know the link may benefit the publisher.

Skill content
Ensure the user has (or will create) an **ElevenLabs account** ([sign up with affiliate link](https://try.elevenlabs.io/ipu2xmg9cwqu)).
Recommendation

Use the disclosed link if comfortable, or go directly to https://elevenlabs.io if you prefer not to use an affiliate link.

What this means

If an API key is mishandled, someone else could use the user's ElevenLabs account/API quota or access associated services.

Why it was flagged

API keys are credentials that can authorize ElevenLabs API use. The behavior is purpose-aligned for API setup and the artifact includes appropriate secure-storage guidance.

Skill content
Create a new API key; optionally set scope and credit limits. Copy the key immediately... Store in environment variables (e.g. `ELEVENLABS_API_KEY`) or a secrets manager.
Recommendation

Create keys only on the official ElevenLabs site, apply scopes or credit limits where available, store keys in a secrets manager or environment variable, and never paste them into public code, chat logs, or client-side apps.