local-tts
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads model weights (approximately 10 GB) from HuggingFace (huggingface.co) and installs the
voxcpmpackage from the Python Package Index (PyPI). Both are well-known services for AI models and software distributions. - [COMMAND_EXECUTION]: The skill uses shell commands to set up a Python virtual environment and execute a generation script (
generate.py) via the Python interpreter. This is necessary for the skill's primary function of local audio generation. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided text to generate audio, which is an inherent part of its functionality.
- Ingestion points: Text data enters through the
--textargument or via standard input (stdin). - Boundary markers: No explicit markers or warnings are used to delimit user text from instruction flags.
- Capability inventory: The skill has access to
Bashfor script execution and file system checks. - Sanitization: There are no mentioned sanitization steps for the input text, though the risk is localized to the speech synthesis output.
Audit Metadata