Skip to main content

voice-agent

Enables voice cloning and automated calls using ElevenLabs and Twilio, generating audio content and enhancing customer interactions.

Install this skill

or
39/100

Security score

The voice-agent skill was audited on May 14, 2026 and we found 37 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 270

Curl to non-GitHub URL

SourceSKILL.md
270curl -s https://api.elevenlabs.io/v1/user -H "xi-api-key: $ELEVENLABS_API_KEY" | python3 -m json.tool
medium line 313

Curl to non-GitHub URL

SourceSKILL.md
313curl -X POST https://api.elevenlabs.io/v1/voices/add -H "xi-api-key: $ELEVENLABS_API_KEY" -F "name=Wesley" -F "description=Wesley Armando principal voice" -F "files=@/workspace/voice/samples/s
medium line 319

Curl to non-GitHub URL

SourceSKILL.md
319VOICE_ID=$(curl -s -X POST https://api.elevenlabs.io/v1/voices/add -H "xi-api-key: $ELEVENLABS_API_KEY" -F "name=Wesley" -F "files=@/workspace/voice/samples/sample_01.mp3" -F "files=@/workspac
medium line 331

Curl to non-GitHub URL

SourceSKILL.md
331# Via curl
medium line 479

Curl to non-GitHub URL

SourceSKILL.md
479curl -X DELETE https://api.elevenlabs.io/v1/voices/$VOICE_ID -H "xi-api-key: $ELEVENLABS_API_KEY"
medium line 485

Curl to non-GitHub URL

SourceSKILL.md
485curl -s https://api.elevenlabs.io/v1/voices -H "xi-api-key: $ELEVENLABS_API_KEY" | python3 -m json.tool | grep -A2 "Wesley"
low line 71

Access to .env file

SourceSKILL.md
71Writes all credentials to .env automatically
low line 117

Access to .env file

SourceSKILL.md
117Condition: ELEVENLABS_EMAIL and ELEVENLABS_PASSWORD in .env
low line 145

Access to .env file

SourceSKILL.md
145→ Also write to .env:
low line 179

Access to .env file

SourceSKILL.md
179Only runs if TWILIO_ACCOUNT_SID is in .env
low line 323

Access to .env file

SourceSKILL.md
323# Write to .env
low line 324

Access to .env file

SourceSKILL.md
324echo "ELEVENLABS_VOICE_ID=$VOICE_ID" >> /docker/openclaw-yyvg/.env
low line 325

Access to .env file

SourceSKILL.md
325echo "✅ ELEVENLABS_VOICE_ID written to .env"
low line 421

Access to .env file

SourceSKILL.md
421→ Write to /docker/openclaw-yyvg/.env as ELEVENLABS_API_KEY=sk_...
low line 446

Access to .env file

SourceSKILL.md
44612. Save to config.json + .env
low line 490

Access to .env file

SourceSKILL.md
490Update config.json and .env with new key
low line 654

Access to .env file

SourceSKILL.md
654Option B: ELEVENLABS_EMAIL + ELEVENLABS_PASSWORD in .env
low line 673

Access to .env file

SourceSKILL.md
673Option B: add to .env:
low line 682

Access to .env file

SourceSKILL.md
6823. (Optional) Add Twilio credentials to .env for calls
low line 36

External URL reference

SourceSKILL.md
36- https://elevenlabs.io (dashboard navigation via virtual-desktop)
low line 37

External URL reference

SourceSKILL.md
37- https://api.elevenlabs.io (ElevenLabs REST API — requires ELEVENLABS_API_KEY)
low line 38

External URL reference

SourceSKILL.md
38- https://api.twilio.com (Twilio API — optional, requires TWILIO credentials)
low line 110

External URL reference

SourceSKILL.md
1101. virtual-desktop opens https://elevenlabs.io/app/sign-in
low line 120

External URL reference

SourceSKILL.md
1201. virtual-desktop opens https://elevenlabs.io/app/sign-in
low line 270

External URL reference

SourceSKILL.md
270curl -s https://api.elevenlabs.io/v1/user -H "xi-api-key: $ELEVENLABS_API_KEY" | python3 -m json.tool
low line 313

External URL reference

SourceSKILL.md
313curl -X POST https://api.elevenlabs.io/v1/voices/add -H "xi-api-key: $ELEVENLABS_API_KEY" -F "name=Wesley" -F "description=Wesley Armando principal voice" -F "files=@/workspace/voice/samples/s
low line 319

External URL reference

SourceSKILL.md
319VOICE_ID=$(curl -s -X POST https://api.elevenlabs.io/v1/voices/add -H "xi-api-key: $ELEVENLABS_API_KEY" -F "name=Wesley" -F "files=@/workspace/voice/samples/sample_01.mp3" -F "files=@/workspac
low line 332

External URL reference

SourceSKILL.md
332curl -s https://api.elevenlabs.io/v1/voices -H "xi-api-key: $ELEVENLABS_API_KEY" | python3 -c "
low line 385

External URL reference

SourceSKILL.md
385virtual-desktop opens: https://elevenlabs.io/app/sign-in
low line 391

External URL reference

SourceSKILL.md
391→ Dashboard loads at: https://elevenlabs.io/app/home
low line 423

External URL reference

SourceSKILL.md
423Direct URL shortcut: https://elevenlabs.io/app/settings/api-keys
low line 448

External URL reference

SourceSKILL.md
448Direct URL shortcut: https://elevenlabs.io/app/voice-lab
low line 455

External URL reference

SourceSKILL.md
455→ Go to: https://elevenlabs.io/app/voice-lab
low line 479

External URL reference

SourceSKILL.md
479curl -X DELETE https://api.elevenlabs.io/v1/voices/$VOICE_ID -H "xi-api-key: $ELEVENLABS_API_KEY"
low line 485

External URL reference

SourceSKILL.md
485curl -s https://api.elevenlabs.io/v1/voices -H "xi-api-key: $ELEVENLABS_API_KEY" | python3 -m json.tool | grep -A2 "Wesley"
low line 489

External URL reference

SourceSKILL.md
489Direct URL: https://elevenlabs.io/app/settings/api-keys
low line 511

External URL reference

SourceSKILL.md
511Base URL: https://api.elevenlabs.io
Scanned on May 14, 2026
View Security Dashboard
Installation guide →