text-to-speech
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
infshcommand-line tool via Bash to interact with the inference.sh API. This is the intended functionality of the skill. Theallowed-toolsmanifest correctly limits the agent to theinfshcommand, reducing the risk of arbitrary command execution. - [EXTERNAL_DOWNLOADS]: The skill references the
infshCLI as a dependency and provides installation instructions vianpx. This is a standard practice for utilizing the inference.sh service ecosystem. - [DATA_EXFILTRATION]: No evidence of unauthorized data collection or exfiltration was found. Network activity is directed toward the official
inference.shdomain for the purpose of speech synthesis. - [PROMPT_INJECTION]: The skill instructions do not contain any bypass attempts or overrides of the agent's safety guidelines. The text input is used exclusively for audio generation.
Audit Metadata