install

The README describes an installer workflow consistent with installing a TTS engine and model on Apple Silicon. The document itself does not contain explicit malicious code or commands, but it delegates critical actions to an opaque shell script and to unpinned package/model downloads. That combination constitutes a moderate supply-chain risk: before running the installer, the kokoro-install.sh and bundled Python scripts should be inspected and the model and dependencies should be integrity-verified or pinned. If the bundle is from a trusted source and the script is inspected, the operation aligns with its stated purpose.