text-to-speech
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
infshCLI tool to run inference applications and manage audio processing tasks. This tool usage is explicitly defined and limited in the skill configuration. - [EXTERNAL_DOWNLOADS]: The documentation provides links to installation instructions and API references hosted on
inference.shand its official GitHub repository (github.com/inference-sh). These resources are used for initial setup and user guidance. - [DATA_EXFILTRATION]: Includes the
infsh logincommand, which is necessary for authenticating the CLI with the provider's platform. This is standard functionality for cloud-based AI services. - [PROMPT_INJECTION]: The skill acts as an interface for speech synthesis models, creating an indirect prompt injection surface where user-provided text is processed by external AI models.
- Ingestion points: User text is passed through the
--inputJSON parameter ininfsh app runcommands acrossSKILL.md. - Boundary markers: Input text is structured within JSON objects, providing a clear boundary between instructions and data.
- Capability inventory: The agent's capabilities are restricted to the
infshtool via the Bash shell. - Sanitization: The skill does not implement client-side sanitization, relying instead on the safety filters of the underlying inference models.
Audit Metadata