speak-summary

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted text data provided by the user or other skills to generate audio output.
  • Ingestion points: The tts.sh script accepts an <input.txt> file as its primary argument.
  • Capability inventory: The script has the capability to write audio files to the filesystem and execute shell commands via the pocket-tts and ffmpeg binaries.
  • Boundary markers: The skill instructions explicitly direct the AI agent to manually rewrite source text into a "spoken script" before passing it to the script, providing a layer of human-in-the-loop or agent-mediated sanitization.
  • Sanitization: The tts.sh script includes an embedded Python routine that uses regular expressions to strip markdown formatting (fenced code, links, headers, bullets, and emphasis) and bare URLs from the input text before it reaches the synthesis engine.
  • [COMMAND_EXECUTION]: The skill relies on shell command execution to perform its primary function.
  • The tts.sh script executes pip to manage a local virtual environment and install the pocket-tts dependency.
  • It invokes the pocket-tts command-line tool to perform the neural speech synthesis.
  • It utilizes ffmpeg or the macOS-specific afconvert utility to encode and concatenate the final audio output.
  • [EXTERNAL_DOWNLOADS]: The skill performs network requests to download required components during setup.
  • It fetches the pocket-tts package from the Python Package Index (PyPI) if it is not already installed.
  • The pocket-tts engine downloads a neural model (approximately 1GB) from Hugging Face during its first execution.
  • [DYNAMIC_EXECUTION]: The tts.sh script uses dynamic execution for internal data processing tasks.
  • It employs a Python heredoc to execute a script at runtime that handles text cleaning and chunks the input into smaller segments for better synthesis quality.
  • It also uses a Python heredoc as a fallback mechanism to join WAV files if ffmpeg is unavailable on macOS.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 04:21 AM
Security Audit — agent-trust-hub — speak-summary