voiceover-maker
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The main script (
scripts/run.py) employsos.execvto restart the process within a dedicated virtual environment (.runners-venv). This is a legitimate development pattern used to ensure the tool runs with the correct Python interpreter and necessary dependencies.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted text data through the--promptand--prompt-fileparameters to generate audio.\n - Ingestion points: User-provided script text via CLI arguments, local files, or standard input (specified in
SKILL.md).\n - Boundary markers: None explicitly defined in the orchestration instructions to distinguish user text from system prompts.\n
- Capability inventory: The skill has access to
Bash,Write, andReadtools, primarily for script execution and outputting audio files.\n - Sanitization: No explicit sanitization or filtering logic is present in the provided entry point script; however, the untrusted data is passed as a payload to external TTS APIs (OpenAI/ElevenLabs) rather than being executed as local code.
Audit Metadata