skills/whq25/rawgenai/agent-speak/Gen Agent Trust Hub

agent-speak

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the rawgenai utility from a personal Homebrew tap belonging to the vendor.
  • Evidence: brew install WHQ25/tap/rawgenai in SKILL.md.
  • [COMMAND_EXECUTION]: The skill's core functionality relies on executing the rawgenai CLI tool to perform voice generation and management tasks.
  • Evidence: Command patterns like rawgenai <provider> tts and rawgenai elevenlabs voice are used throughout the skill and its reference files.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted text data from multiple sources to be processed by speech synthesis models, lacking boundary markers to separate data from model instructions.
  • Ingestion points: The skill reads input from positional arguments, files (--file), and standard input in SKILL.md, as well as JSON scripts in references/dialogue/elevenlabs.md.
  • Boundary markers: No delimiters or "ignore instructions" warnings are used to wrap the input text.
  • Capability inventory: The skill executes the rawgenai CLI tool (command execution), which makes network requests to AI providers and writes audio files to the local system.
  • Sanitization: No evidence of input filtering or escaping was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 01:33 AM