sherpa-onnx-tts
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill metadata (SKILL.md) specifies the download of binary runtime archives and voice models from a third-party GitHub repository (k2-fsa/sherpa-onnx) across macOS, Linux, and Windows platforms.- [REMOTE_CODE_EXECUTION]: The skill implementation downloads pre-compiled binary executables from a remote source which are then executed by the agent via a provided wrapper script.- [COMMAND_EXECUTION]: The Node.js wrapper script (bin/sherpa-onnx-tts) utilizes
spawnSyncto execute the downloadedsherpa-onnx-offline-ttsbinary with arguments including model paths and user-provided text.- [DYNAMIC_EXECUTION]: The wrapper script dynamically modifies the runtime environment at execution time by prepending the library directory to search paths (LD_LIBRARY_PATHon Linux,DYLD_LIBRARY_PATHon macOS, andPATHon Windows) to facilitate the loading of shared object dependencies.- [INDIRECT_PROMPT_INJECTION]: The skill processes external text input which is passed directly to a subprocess for synthesis. - Ingestion points: The
textargument inbin/sherpa-onnx-ttsallows for arbitrary text input. - Boundary markers: Absent; the script does not use delimiters or instructions to prevent the processing of embedded directives.
- Capability inventory: Subprocess execution via
spawnSyncinbin/sherpa-onnx-ttsacross all files. - Sanitization: Absent; the script performs basic string joining and trimming but no sanitization of input that might impact the underlying binary execution.
Recommendations
- AI detected serious security threats
Audit Metadata