ai-voice-cloning
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references installation instructions hosted on the official GitHub repository of the service provider for the required CLI tool.- [INDIRECT_PROMPT_INJECTION]: The skill acts as a bridge between user-supplied text and external AI voice generation models. This creates a surface where maliciously crafted input could potentially attempt to influence the behavior of the downstream TTS engine.
- Ingestion points: User-provided text for speech generation is used in the
promptandtextarguments of thebeltcommand in SKILL.md. - Boundary markers: Absent. The input is passed directly within the JSON payload.
- Capability inventory: Executes shell commands via the
Bashtool to interact with thebeltCLI. - Sanitization: Not observed; the skill passes raw strings to the external API.- [COMMAND_EXECUTION]: The skill heavily relies on executing shell commands via the
Bashtool to perform operations such as authentication, running AI models, and merging media files.
Audit Metadata