voice-ai-integration
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill implements a dynamic prompt generation pattern that is susceptible to indirect prompt injection because it incorporates user-controlled inputs into the AI's system instructions.
- Ingestion points: The
startSessiontRPC endpoint inSKILL.mdaccepts inputs such asarchetype,difficulty, andpracticeModefrom the client. - Boundary markers: The
generateSystemPromptfunction inSKILL.mdinterpolates these variables directly into template strings without using delimiters or instructions to ignore embedded commands. - Capability inventory: The AI interface (Hume EVI) has the capability to conduct real-time conversations and the results are stored in a database (
practice_sessionstable). - Sanitization: The provided code snippets do not show any validation or escaping of user inputs before they are included in the generated system prompt.
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the official
humeandtwiliopackages from the public NPM registry to enable voice and AI functionality. - [COMMAND_EXECUTION]: The documentation includes standard shell commands for installing dependencies using the
pnpmpackage manager.
Audit Metadata