text-to-speech
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto invoke external binaries for core functionality.scripts/backends/lib/kokoro_round5.pyandscripts/backends/lib/inject_chapters.pycallffmpegfor audio encoding and self-testing.scripts/backends/lib/pipeline.pyandscripts/backends/lib/chunk_and_rewrite.pycall theclaudeCLI to perform text-to-speech narrative rewriting (Layer 1).scripts/backends/kokoro.shusesln -sfto symlink Homebrew libraries to theespeakng_loaderpath to resolve environment-specific dylib resolution issues. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted markdown documents that are passed to an LLM for rewriting. Ingestion points:
pipeline.pyandchunk_and_rewrite.pyread the content of user-provided markdown input files. Boundary markers: The source text is interpolated into an LLM prompt and delimited by---SOURCE---markers. Capability inventory: The skill can write files to the local file system and execute shell commands (claude,ffmpeg,ln). Sanitization:pipeline.pyimplements avalidate_narrative()function as a backstop. This function checks for the presence of chapter markers, validates that the output word count is at least 20% of the source, and scans for known contamination markers that indicate the LLM may have inherited session meta-commentary. - [DYNAMIC_EXECUTION]:
scripts/backends/kokoro.shdynamically modifies the execution environment by symlinking Homebrew-provided library files into the site-packages directory of theespeakng_loaderdependency if a runtime initialization probe fails. This is a corrective measure for a known library path resolution bug.
Audit Metadata