free-tts
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the edge-tts Python package from a public registry.
- [COMMAND_EXECUTION]: The skill operates by invoking the edge-tts command-line utility through shell commands.
- [PROMPT_INJECTION]: The workflow involves interpolating untrusted user input directly into a shell command, creating a surface for indirect prompt injection or command injection.
- Ingestion points: User-provided text passed to the --text parameter.
- Boundary markers: Absent; the skill does not define escaping or encapsulation for the command arguments.
- Capability inventory: Shell execution capability used to run the edge-tts utility.
- Sanitization: Absent; there are no instructions to sanitize or validate input text before command construction.
Audit Metadata