chattts-voice-generation
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
ffmpegcommand-line utility viasubprocess.runto perform audio speed normalization using theatempofilter. Evidence is found in thechange_audio_speedfunction withinSKILL.md. The execution is restricted to temporary file paths and numeric factors, which reduces risk.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text to generate audio and synchronization metadata, creating an ingestion surface for untrusted data. It implements regex-based cleaning (re.sub(r'<[^>]*>', '', text)) and explicit string replacements to sanitize input before processing.\n- [SAFE]: The skill usestorch.loadwithweights_only=Trueto load speaker embeddings, which is a recommended security practice to prevent code execution via malicious serialized data.
Audit Metadata