giggle-generation-speech
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues or malicious patterns were identified. The skill's operations are transparently documented and align with its primary function of text-to-speech synthesis.
- [COMMAND_EXECUTION]: The skill uses the
exectool to run its integrated Python scripts for API interaction. This execution is limited to the skill's internal logic and does not allow for arbitrary command injection. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text for synthesis.
- Ingestion points: User-provided strings used in the
--textargument of the submission script (SKILL.md). - Boundary markers: Absent from the skill instructions.
- Capability inventory: Network access to the Giggle.pro API and file system writes for task logging (
~/.openclaw/skills/giggle-generation-speech/logs/). - Sanitization: Input is handled via standard JSON serialization within the Python script before being sent to the API.
Audit Metadata