sherpa-onnx-tts
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads platform-specific binaries and voice models from the official sherpa-onnx repository on GitHub (k2-fsa) as part of the installation process defined in the metadata.
- [REMOTE_CODE_EXECUTION]: The wrapper script executes the downloaded sherpa-onnx-offline-tts binary to perform the text-to-speech synthesis.
- [COMMAND_EXECUTION]: The script uses child_process.spawnSync to invoke the TTS engine with arguments provided through the command line or environment variables.
- [DYNAMIC_EXECUTION]: The script configures library search paths (LD_LIBRARY_PATH, DYLD_LIBRARY_PATH, or PATH) at runtime to ensure the downloaded binary can locate its required shared libraries.
Audit Metadata