qwen3-tts
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches models from the official Qwen organization on Hugging Face (e.g.,
Qwen/Qwen3-TTS-12Hz-1.7B-CustomVoice), which is a well-known and trusted source. - [EXTERNAL_DOWNLOADS]: Recommends cloning the official Qwen3-TTS source code repository from GitHub (
https://github.com/QwenLM/Qwen3-TTS.git). - [EXTERNAL_DOWNLOADS]: Instructions involve installing official Python packages
qwen-ttsandflash-attnfrom public registries. - [COMMAND_EXECUTION]: Includes standard commands for environment setup using Conda and package installation with pip.
- [COMMAND_EXECUTION]: Provides instructions to launch a local Gradio web interface. While the use of
--no-ssl-verifyand binding to0.0.0.0are noted as insecure configurations for public-facing servers, they are standard for local development and testing of this specific tool. - [SAFE]: The skill exposes an indirect prompt injection surface through text-to-speech generation. 1. Ingestion points:
textparameter ingenerate_custom_voiceand other methods inSKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: File write viasoundfile.writeand command execution viaqwen-tts-demo. 4. Sanitization: Absent. This surface is inherent to the skill's intended text-to-speech functionality.
Audit Metadata