agent-speak
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill extensively uses the
rawgenaiCLI tool to perform text-to-speech, multi-speaker dialogue generation, and voice management operations across various providers. - [EXTERNAL_DOWNLOADS]: The instructions require installing the
rawgenaiutility from the author's Homebrew tap (brew install WHQ25/tap/rawgenai). This is documented as a vendor-provided tool. - [PROMPT_INJECTION]: The skill processes untrusted text from users or files to generate audio, creating an inherent surface for indirect prompt injection where instructions embedded in the data can manipulate the speech model's output style or behavior.
- Ingestion points: Text passed to
rawgenai ttsvia command arguments, the--fileflag, or stdin. - Boundary markers: Absent; the skill does not use delimiters or instructions to ignore embedded commands in the processed text.
- Capability inventory: The skill executes shell commands that interact with multiple third-party API providers (OpenAI, Google, ElevenLabs, DashScope, MiniMax, Kling, Seed).
- Sanitization: No sanitization or validation of input text is specified in the skill's instructions.
Audit Metadata