MoodCast

• Analyzed: May 12, 2026, 3:09 AM
• Findings: 1
• Version: 1.0.2
• Hash: e98e56df6e35522a7c37cc3f34047d3205eeb7b6c527f44ca3ef66bc37a6c4a5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to transform text into emotionally expressive audio using ElevenLabs APIs, which is clearly aligned with its stated purpose. The `scripts/moodcast.py` file uses `subprocess` for legitimate functions like installing the `elevenlabs` package if missing and playing audio locally via system players (`afplay`, `mpv`, `ffplay`, `aplay`) using securely created temporary files. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The `SKILL.md` instructions for the AI agent are direct invocations of the Python script with arguments relevant to its functionality, showing no signs of prompt injection attempts to deviate from the skill's purpose.