Edge Tts Unlimited

PassAudited by VirusTotal on May 11, 2026.

Overview

Type: OpenClaw Skill Name: edge-tts-unlimited Version: 1.0.1 The skill provides a legitimate utility for generating text-to-speech audio using the Microsoft Edge TTS engine. The core logic in `scripts/speak.sh` is well-structured, including dependency checks for 'uv' or 'pip' and standard argument parsing. While it may install the 'edge-tts' Python package if missing, this behavior is directly aligned with its stated purpose and lacks any indicators of data exfiltration, persistence, or malicious intent.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The first use may fetch third-party Python code, and future package changes could affect behavior.

Why it was flagged

The helper can download and run the unpinned edge-tts Python package at invocation time, and the pip fallback installs it into the local Python environment. This is disclosed and purpose-aligned, but users should be aware of the dependency/provenance risk.

Skill content
"$UV" run --with edge-tts -- edge-tts "$@" ... pip3 install -q edge-tts &>/dev/null
Recommendation

Install from a trusted environment, consider using uv or a virtual environment, and pin/review the edge-tts package version if reproducibility matters.

What this means

Text or file contents submitted for speech generation may be processed by the external TTS provider.

Why it was flagged

The skill is designed to process user-provided text or file contents through Microsoft Edge/edge-tts voices. That is expected for the stated TTS purpose, but the artifacts do not spell out privacy boundaries for sensitive input.

Skill content
Free, unlimited text-to-speech using Microsoft Edge neural voices via Python edge-tts ... Generate from file: scripts/speak.sh --file /tmp/my-script.txt -o output.mp3
Recommendation

Avoid passing secrets, private documents, or regulated data unless you are comfortable with the provider handling that content.