ai-voice-cloning
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
beltCLI tool to perform its primary functions, including authentication (belt login) and running AI models (e.g.,belt app run infsh/kokoro-tts). These operations are within the scope of the skill's intended purpose for voice synthesis. - [EXTERNAL_DOWNLOADS]: The skill directs users to install external software components, specifically the
belt-sh/clipackage vianpxand configuration files from theinference-shGitHub organization. These resources originate from the official infrastructure of the service being integrated. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a conduit for user-supplied text that is processed by remote AI models.
- Ingestion points: User-provided strings in the
promptandtextfields of the JSON payloads passed to thebeltCLI (SKILL.md). - Boundary markers: The use of structured JSON for tool inputs helps separate user-provided content from the command structure.
- Capability inventory: The skill utilizes the
Bashtool to execute CLI commands and manage local audio/video files resulting from the synthesis. - Sanitization: Content is passed as a data payload to the
inference.shAPI, which manages its own safety filtering for model inputs.
Audit Metadata