hub
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
voxflowCLI tool for all core functionalities, including voice synthesis (say), long-form narration (narrate), and story generation (story). It also uses system-specific commands likeopen(macOS) orxdg-open(Linux) to play generated audio files. - [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
voxflowpackage globally vianpm install -g voxflow. Additionally, thevoxflow addcommand is used to download and install voice presets or pipeline templates from a remote registry. - [DATA_EXFILTRATION]: The
voxflow feedbackcommand is designed to exfiltrate data (bug reports and system info) to GitHub. It uses theghCLI to programmatically create issues, which involves sending local state and user-supplied descriptions to an external service.
Audit Metadata