daily-voice-quote
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from local reference files and user-provided media, creating a surface for indirect prompt injection.
- Ingestion points: The skill reads quote data from
references/quotes.mdand holiday metadata fromreferences/holidays.md. It also utilizes user-supplied photos stored in theavatars/directory for image generation prompts. - Boundary markers: There are no specific delimiters or instructions to ignore embedded commands when the text from quote files is interpolated into speech generation scripts or API payloads.
- Capability inventory: The skill has access to media processing tools (
ffmpeg), voice synthesis (sag), and network communication (curl) to send data to external APIs. - Sanitization: The shell script
scripts/send-daily-quote.shperforms minimal escaping of text before including it in the JSON payload sent to the LINE API, which could lead to malformed requests if inputs contain special characters. - [EXTERNAL_DOWNLOADS]: The skill setup process involves downloading and installing several third-party command-line utilities.
- The installation instructions use Homebrew to fetch
sag(an ElevenLabs CLI),ffmpeg, anduv(a Python toolchain manager). - [COMMAND_EXECUTION]: The core functionality of the skill is driven by the execution of shell commands and external scripts.
- The
scripts/send-daily-quote.shscript coordinates the workflow by executingsagfor text-to-speech,ffmpegfor audio conversion, andcurlto interact with the LINE messaging API. - The
SKILL.mdinstructions specify the use ofuv runto execute image generation scripts andpython3for digital avatar video synthesis via HeyGen.
Audit Metadata