vox-tts
Warn
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: MEDIUMPERSISTENCEDATA_EXFILTRATIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [PERSISTENCE]: The
scripts/register_mcp.shscript modifies local application configuration files to register the service as an MCP server. It specifically targets~/.hermes/config.yamland~/.claude/settings.json, which ensures the remote tool remains active across agent sessions. - [DATA_EXFILTRATION]: The
scripts/clone_voice.shandscripts/add_voice.shscripts facilitate the upload of local files to a remote server (https://vox.delo.sh). While this is the intended functionality for voice cloning, the mechanism allows for the exfiltration of local data if the agent is directed to upload sensitive files instead of audio recordings. - [DYNAMIC_EXECUTION]: Multiple scripts (
scripts/register_mcp.sh,scripts/synth.sh, andscripts/synth_url.sh) utilizepython3 -cand `python3 - <<EOF` to execute dynamic code blocks for JSON construction and configuration file manipulation at runtime.
- [COMMAND_EXECUTION]: The skill relies on shell scripts that invoke several system commands including
curl,python3,sed,tr, and CLI tools for other agents (likehermesandopenclaw) to perform registration and synthesis tasks.
Audit Metadata