Security audit

Supertonic TTS

Security checks for vulnerabilities and agentic risk

Overview

The skill is mostly coherent for local text-to-speech, but it needs review because its scripts trust an unrelated shared Python environment and use unpinned downloaded components.

Install only if you are comfortable with a Python package and model download running under your user account. Prefer a dedicated virtual environment with pinned and hash-checked dependencies, avoid relying on the browser-use virtualenv, and use voice cloning only if uploading biometric voice audio to Supertone is acceptable for your use case.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:29
Finding: Unpinned Third-Party Package Installation
Content: View full analysis
Remediation: View remediation
--hash=sha256: ``` 3. Install with hash enforcement: ```bash python3 -m pip install --require-hashes -r requirements.txt ``` 4. Document and enforce the expected package index, while ensuring credentials are not embedded in project files. 5. Use a dedicated virtual environment rather than installing into a user-wide or system-wide Python environment. 6. Add automated dependency vulnerability and integrity scanning to the release process. 7. Review and pin dependencies involved in automatic model retrieval, and document the trusted Hugging Face repository and expected model revisions or checksums. ]]>

T08 · Insecure Dependencies

Warning

Location: scripts/synthesize.py:14
Finding: Local Module Hijacking Through an Unrelated Shared Virtual Environment
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Context-Inappropriate Capability

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The script prepends a user-home virtualenv site-packages path to sys.path, causing imports to come from a mutable location outside the skill/package boundary. It also enables TTS(auto_download=True), which permits network-driven code/resource retrieval at runtime; together these behaviors increase supply-chain and environment-hijacking risk if a local attacker or compromised environment can control that virtualenv or downloaded artifacts.
Content: No source excerpt is available for this finding.