voice-apply
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and apply 'voice profiles' from external YAML files located in the project directory (
.aiwg/voices/) or the user's home configuration directory (~/.config/aiwg/voices/). These files directly influence the agent's output behavior, vocabulary choices, and narrative perspective. - Ingestion points: The
voice_loader.pyscript reads and parses profile data from local files; theSKILL.mdinstructions guide the agent to load and apply these profiles dynamically. - Boundary markers: The skill instructions lack explicit delimiters or 'ignore' warnings for the profile content, which could allow instructions embedded within a voice profile to be misinterpreted as agent directives.
- Capability inventory: The agent is directed to perform vocabulary replacement, tone calibration, and structural content adjustment based on data ingested from these external profiles.
- Sanitization: The
voice_loader.pyscript includes avalidate_profilefunction that checks for required fields and numeric ranges for tone dimensions, providing structural validation but not semantic protection against malicious instructions. - [COMMAND_EXECUTION]: The skill relies on the execution of bundled Python scripts (
scripts/voice_loader.pyandscripts/voice_analyzer.py) to process and validate the voice configuration files at runtime.
Audit Metadata