xeon_asr

• Analyzed: May 11, 2026, 5:55 AM
• Findings: 1
• Version: 0.1.4
• Hash: 36331ee0e00cd5d1bb08e1a2633fab028d4769834d21ccfd597a048be5691ca1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle implements a local TTS and voice cloning service but exhibits high-risk behaviors during its installation and configuration phases. Specifically, `setup_env.sh` attempts to install system-level dependencies using `sudo apt-get/yum`, and `configure_openclaw_integration.sh` programmatically modifies the core `openclaw.json` configuration file. While these actions are plausibly necessary for the stated purpose of setting up a local OpenVINO inference environment, the requirement for elevated privileges and the automated tampering with global configuration files represent a significant attack surface. No clear evidence of intentional malice, such as data exfiltration or backdoors, was found.