hyperframes-tts
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
hyperframesCLI tool vianpxto perform core tasks such as text-to-speech generation and audio transcription. These commands are consistent with the skill's stated purpose of local audio processing. - [EXTERNAL_DOWNLOADS]: Requires the installation of public Python packages
kokoro-onnxandsoundfile. It also triggers an automated download of the Kokoro-82M model (~311 MB) and associated voices (~27 MB) to the~/.cache/hyperframes/tts/directory upon first use, which is standard behavior for local AI inference tools. - [SAFE]: Analyzed for potential indirect prompt injection surface where user-provided text is passed to the TTS command. Ingestion points: User strings or text file paths passed to the
npx hyperframes ttscommand. Boundary markers: Not explicitly defined in usage examples. Capability inventory: Access to local shell via CLI execution. Sanitization: No explicit sanitization mentioned. The surface is inherent to text-to-speech functionality and is assessed as safe in this context.
Audit Metadata