edge-tts
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the 'edge-tts' package from PyPI using standard package managers (pip, uv). This is a well-known third-party utility for Microsoft Edge TTS synthesis.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a PowerShell wrapper script ('say-script.md') that processes arbitrary text input for audio synthesis, creating a surface for indirect prompt injection.
- Ingestion points: The '$Text' parameter and pipeline input in 'references/say-script.md'.
- Boundary markers: None. The script does not include delimiters or warnings to ignore embedded instructions in the processed text.
- Capability inventory: Executes 'edge-tts' and 'edge-playback' binaries and can write output to local files (MP3 format).
- Sanitization: None. The script passes input text directly to the underlying synthesis engine.
Audit Metadata