creativeclaw-xai-tts
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text strings to generate speech output, which creates a potential surface for instructions to be embedded in data that the agent or the downstream model might interpret.
- Ingestion points: The
textparameter in thegenerate_speechtool call withinSKILL.md. - Boundary markers: No explicit boundary markers or "ignore embedded instructions" warnings are defined for the input text.
- Capability inventory: The skill utilizes capabilities for network operations (speech generation and feedback), asset management, and file assembly operations across the
creative-clawtoolset. - Sanitization: No sanitization, escaping, or validation of the external content is described before interpolation into the tool call.
- [EXTERNAL_DOWNLOADS]: The skill references and utilizes the
creative-clawtoolset hosted on the vendor's infrastructure athttps://app.creativeclaw.co/mcp/chatgpt.
Audit Metadata