Security audit
Poyo Gemini 3 1 Flash Tts
Security checks across malware telemetry and agentic risk
Overview
This skill is a straightforward PoYo text-to-speech helper that uses a disclosed API key and curl submission script for its stated purpose.
Install only if you intend to send text-to-speech prompts to PoYo. Keep POYO_API_KEY server-side, review payloads before submitting, and avoid sending sensitive scripts, private text, callback URLs, task IDs, or generated audio URLs unless your own policy allows it.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.