Skip to main content

agents

Enables the creation of voice AI agents for customer service and interactive experiences using ElevenLabs' API.

Install this skill

or
68/100

Security score

The agents skill was audited on May 23, 2026 and we found 12 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 161

Template literal with variable interpolation in command context

SourceSKILL.md
161document.getElementById("product").src = `/products/${productId}`;
medium line 84

Curl to non-GitHub URL

SourceSKILL.md
84curl -X POST "https://api.elevenlabs.io/v1/convai/agents/create" \
medium line 208

Curl to non-GitHub URL

SourceSKILL.md
208curl -X POST "https://api.elevenlabs.io/v1/convai/twilio/outbound-call" \
medium line 135

Webhook reference - potential data exfiltration

SourceSKILL.md
135Extend agents with webhook, client, or built-in system tools. Tools are defined inside `conversation_config.agent.prompt`:
low line 142

Webhook reference - potential data exfiltration

SourceSKILL.md
142# Webhook: server-side API call
low line 143

Webhook reference - potential data exfiltration

SourceSKILL.md
143{"type": "webhook", "name": "get_weather", "description": "Get weather",
low line 233

Webhook reference - potential data exfiltration

SourceSKILL.md
233elevenlabs tools add-webhook "Weather API"
medium line 288

Webhook reference - potential data exfiltration

SourceSKILL.md
288- [Client Tools](references/client-tools.md) - Webhook, client, and system tools
low line 84

External URL reference

SourceSKILL.md
84curl -X POST "https://api.elevenlabs.io/v1/convai/agents/create" \
low line 144

External URL reference

SourceSKILL.md
144"api_schema": {"url": "https://api.example.com/weather", "method": "POST",
low line 173

External URL reference

SourceSKILL.md
173<script src="https://unpkg.com/@elevenlabs/convai-widget-embed" async type="text/javascript"></script>
low line 208

External URL reference

SourceSKILL.md
208curl -X POST "https://api.elevenlabs.io/v1/convai/twilio/outbound-call" \
Scanned on May 23, 2026
View Security Dashboard
Installation guide →
Rate this skill
Categorysales
UpdatedMay 25, 2026
openclawcustomer-success-managerproduct-marketergrowth-marketersales-engineertechnical-supportsalesmarketingsupport
mashharuki/Mistral-Worldwide-Hackathon