tts-stt-sts
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a sample audio file from
https://cdn.qili2.com/pub/voice/ray/sichuan.mp3using curl for use in a voice cloning example. - [COMMAND_EXECUTION]: The skill executes shell commands using
uvxto run mlx-audio and whisper CLI tools and usesffmpegfor audio format conversion. - [PROMPT_INJECTION]: The skill ingests external data which represents a surface for indirect prompt injection. 1. Ingestion points: Reads text from local files like
script.txtandref_normal.txt(SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Usesuvxto call Python-based CLI tools,curlfor downloads, andffmpegfor audio conversion (SKILL.md). 4. Sanitization: No explicit sanitization or validation of the input text files is performed.
Audit Metadata