sag
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
sagbinary from a third-party Homebrew tap (steipete/tap/sag). This is the primary dependency for the skill's functionality. - [COMMAND_EXECUTION]: The skill executes the
sagcommand-line tool to convert text to speech and list available voices. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied strings as input for the
sagcommand. The ingestion point is the text passed to the CLI. While standard quoting is used in examples, untrusted data could theoretically attempt to escape the command string if not properly handled by the agent's execution environment. The skill uses/tmp/voice-reply.mp3as a temporary storage path for the generated output.
Audit Metadata