voice-agent
Enables voice cloning and automated calls using ElevenLabs and Twilio, generating audio content and enhancing customer interactions.
Install this skill
Security score
The voice-agent skill was audited on May 14, 2026 and we found 37 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 270 | curl -s https://api.elevenlabs.io/v1/user -H "xi-api-key: $ELEVENLABS_API_KEY" | python3 -m json.tool |
Curl to non-GitHub URL
| 313 | curl -X POST https://api.elevenlabs.io/v1/voices/add -H "xi-api-key: $ELEVENLABS_API_KEY" -F "name=Wesley" -F "description=Wesley Armando principal voice" -F "files=@/workspace/voice/samples/s |
Curl to non-GitHub URL
| 319 | VOICE_ID=$(curl -s -X POST https://api.elevenlabs.io/v1/voices/add -H "xi-api-key: $ELEVENLABS_API_KEY" -F "name=Wesley" -F "files=@/workspace/voice/samples/sample_01.mp3" -F "files=@/workspac |
Curl to non-GitHub URL
| 331 | # Via curl |
Curl to non-GitHub URL
| 479 | curl -X DELETE https://api.elevenlabs.io/v1/voices/$VOICE_ID -H "xi-api-key: $ELEVENLABS_API_KEY" |
Curl to non-GitHub URL
| 485 | curl -s https://api.elevenlabs.io/v1/voices -H "xi-api-key: $ELEVENLABS_API_KEY" | python3 -m json.tool | grep -A2 "Wesley" |
Access to .env file
| 71 | Writes all credentials to .env automatically |
Access to .env file
| 117 | Condition: ELEVENLABS_EMAIL and ELEVENLABS_PASSWORD in .env |
Access to .env file
| 145 | → Also write to .env: |
Access to .env file
| 179 | Only runs if TWILIO_ACCOUNT_SID is in .env |
Access to .env file
| 323 | # Write to .env |
Access to .env file
| 324 | echo "ELEVENLABS_VOICE_ID=$VOICE_ID" >> /docker/openclaw-yyvg/.env |
Access to .env file
| 325 | echo "✅ ELEVENLABS_VOICE_ID written to .env" |
Access to .env file
| 421 | → Write to /docker/openclaw-yyvg/.env as ELEVENLABS_API_KEY=sk_... |
Access to .env file
| 446 | 12. Save to config.json + .env |
Access to .env file
| 490 | Update config.json and .env with new key |
Access to .env file
| 654 | Option B: ELEVENLABS_EMAIL + ELEVENLABS_PASSWORD in .env |
Access to .env file
| 673 | Option B: add to .env: |
Access to .env file
| 682 | 3. (Optional) Add Twilio credentials to .env for calls |
External URL reference
| 36 | - https://elevenlabs.io (dashboard navigation via virtual-desktop) |
External URL reference
| 37 | - https://api.elevenlabs.io (ElevenLabs REST API — requires ELEVENLABS_API_KEY) |
External URL reference
| 38 | - https://api.twilio.com (Twilio API — optional, requires TWILIO credentials) |
External URL reference
| 110 | 1. virtual-desktop opens https://elevenlabs.io/app/sign-in |
External URL reference
| 120 | 1. virtual-desktop opens https://elevenlabs.io/app/sign-in |
External URL reference
| 270 | curl -s https://api.elevenlabs.io/v1/user -H "xi-api-key: $ELEVENLABS_API_KEY" | python3 -m json.tool |
External URL reference
| 313 | curl -X POST https://api.elevenlabs.io/v1/voices/add -H "xi-api-key: $ELEVENLABS_API_KEY" -F "name=Wesley" -F "description=Wesley Armando principal voice" -F "files=@/workspace/voice/samples/s |
External URL reference
| 319 | VOICE_ID=$(curl -s -X POST https://api.elevenlabs.io/v1/voices/add -H "xi-api-key: $ELEVENLABS_API_KEY" -F "name=Wesley" -F "files=@/workspace/voice/samples/sample_01.mp3" -F "files=@/workspac |
External URL reference
| 332 | curl -s https://api.elevenlabs.io/v1/voices -H "xi-api-key: $ELEVENLABS_API_KEY" | python3 -c " |
External URL reference
| 385 | virtual-desktop opens: https://elevenlabs.io/app/sign-in |
External URL reference
| 391 | → Dashboard loads at: https://elevenlabs.io/app/home |
External URL reference
| 423 | Direct URL shortcut: https://elevenlabs.io/app/settings/api-keys |
External URL reference
| 448 | Direct URL shortcut: https://elevenlabs.io/app/voice-lab |
External URL reference
| 455 | → Go to: https://elevenlabs.io/app/voice-lab |
External URL reference
| 479 | curl -X DELETE https://api.elevenlabs.io/v1/voices/$VOICE_ID -H "xi-api-key: $ELEVENLABS_API_KEY" |
External URL reference
| 485 | curl -s https://api.elevenlabs.io/v1/voices -H "xi-api-key: $ELEVENLABS_API_KEY" | python3 -m json.tool | grep -A2 "Wesley" |
External URL reference
| 489 | Direct URL: https://elevenlabs.io/app/settings/api-keys |
External URL reference
| 511 | Base URL: https://api.elevenlabs.io |