speech-pathology-ai
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external speech audio, transcriptions, and web search results, which creates a surface where maliciously crafted data could attempt to influence the agent's logic.\n
- Ingestion points: Audio data processed via
process_audio_streamand web content retrieved viamcp__firecrawl__firecrawl_searchandWebFetchinreferences/mellifluo-platform.mdandSKILL.md.\n - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands in the processed audio/text data.\n
- Capability inventory: The skill has access to bash execution, file editing, and network search tools across all scripts.\n
- Sanitization: No specific sanitization or filtering of speech-to-text transcriptions is implemented before processing.\n- [DYNAMIC_EXECUTION]: The skill uses
torch.loadto load neural network weights, which relies on thepickleserialization format.\n - Evidence:
torch.load(model_path)is called inRealTimePERCEPTRandRealTimePhonemeRecognizerwithin/references/ai-models.mdto load model weights.\n - Context: This is the standard mechanism for loading weights in the PyTorch ecosystem and is tied to the skill's primary function of speech analysis.\n- [EXTERNAL_DOWNLOADS]: The skill downloads pre-trained AI models from external repositories at runtime.\n
- Evidence: Implementation in
/references/ai-models.mdfetches models from HuggingFace, specificallyfacebook/wav2vec2-xls-r-300mandvitouphy/wav2vec2-xls-r-300m-timit-phoneme.\n - Context: These models are hosted on HuggingFace and use well-known provider organizations.
Audit Metadata