omnivoice
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains several shell scripts for managing the OmniVoice Studio backend and recording reference audio. Executed commands include
ffmpegfor audio capture and processing,uvanduvicornfor service execution, andkill/lsoffor process lifecycle management. On macOS, it also utilizessayandafplayto provide audible cues to the user during the microphone recording process. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of the OmniVoice Studio source code from GitHub and the 2.4 GB diffusion model from HuggingFace. These resources are required for the local backend to function and originate from well-known repositories associated with the tool.
- [DATA_EXFILTRATION]: The
record-reference.shscript utilizesffmpegto capture audio from the system microphone. This data is stored temporarily and then uploaded to the local backend server at127.0.0.1:3900for creating voice profiles. The script ensures transparency by using audible announcements to inform the user when recording is active. - [PROMPT_INJECTION]: The
generate_speechtool processes arbitrary text through the synthesis engine, creating an indirect prompt injection surface. - Ingestion points: The
textparameter of thegenerate_speechtool inSKILL.mdallows the agent to process external content. - Boundary markers: No specific delimiters or instructions are used to separate the input text from the synthesis instructions.
- Capability inventory: The skill possesses the capability to record audio, write files, and execute shell commands via its included scripts.
- Sanitization: The input text is passed to the local synthesis server without sanitization or filtering of potential embedded instructions.
Audit Metadata