voicemode
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
uvxto install and run thevoice-mode-installpackage from the vendor's repository to configure the VoiceMode environment. - [EXTERNAL_DOWNLOADS]: It provides instructions to install the Hammerspoon utility via Homebrew (
brew install --cask hammerspoon) to enable macOS media key integration. - [COMMAND_EXECUTION]: The skill modifies the Hammerspoon configuration file (
~/.hammerspoon/init.lua) to dynamically load and execute a Lua script from the local file system. - [COMMAND_EXECUTION]: The skill provides procedures to configure
tailscale serve, which exposes local transcription and speech services to the Tailscale network for remote access via HTTPS. - [PROMPT_INJECTION]: The skill processes transcription data from voice interactions using the
voicemode:conversetool; this introduces an indirect prompt injection surface where spoken content is ingested into the agent context without explicit boundary markers, which is a functional requirement of voice-to-text integration.
Audit Metadata