text-to-speech
Fail
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides a command (
curl -fsSL https://cli.inference.sh | sh) that pipes a script from a remote vendor-controlled domain directly to the shell for installation. - [COMMAND_EXECUTION]: Functionality is implemented using the
infshtool, which is granted permission in the skill's metadata. - [EXTERNAL_DOWNLOADS]: The skill and its associated CLI tool fetch binary updates and application data from vendor domains such as
dist.inference.shandcloud.inference.sh. - [PROMPT_INJECTION]: The skill processes untrusted input strings for speech synthesis (SKILL.md). Ingestion points: Text passed via the
--inputflag. Boundary markers: None. Capability inventory: Interaction with theinfshbinary. Sanitization: None described.
Recommendations
- HIGH: Downloads and executes remote code from: https://cli.inference.sh - DO NOT USE without thorough review
Audit Metadata