walkie-talkie-hardened
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local scripts and binaries (
tools/transcribe_voice.shandbin/sherpa-onnx-tts) to process audio and generate speech. - [EXTERNAL_DOWNLOADS]: The
SAFETY.mddocumentation includes links to external vendor resources atfaberlens.aiand GitHub for support and further evaluation. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface. Transcribed text from audio messages is processed as a standard user prompt without explicit boundary markers or sanitization, which could allow instructions hidden in audio to influence the agent.
- Ingestion points:
SKILL.md(Workflow Step 1). - Boundary markers: Absent; transcribed text is treated as a normal user prompt.
- Capability inventory: Shell execution (
tools/transcribe_voice.sh,bin/sherpa-onnx-tts) and messaging via themessagetool. - Sanitization: Absent.
Audit Metadata