agent-speak
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
rawgenaiutility from a personal Homebrew tap belonging to the vendor. - Evidence:
brew install WHQ25/tap/rawgenaiinSKILL.md. - [COMMAND_EXECUTION]: The skill's core functionality relies on executing the
rawgenaiCLI tool to perform voice generation and management tasks. - Evidence: Command patterns like
rawgenai <provider> ttsandrawgenai elevenlabs voiceare used throughout the skill and its reference files. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted text data from multiple sources to be processed by speech synthesis models, lacking boundary markers to separate data from model instructions.
- Ingestion points: The skill reads input from positional arguments, files (
--file), and standard input inSKILL.md, as well as JSON scripts inreferences/dialogue/elevenlabs.md. - Boundary markers: No delimiters or "ignore instructions" warnings are used to wrap the input text.
- Capability inventory: The skill executes the
rawgenaiCLI tool (command execution), which makes network requests to AI providers and writes audio files to the local system. - Sanitization: No evidence of input filtering or escaping was found.
Audit Metadata