Edge TTS English

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This is a straightforward text-to-speech skill, but it relies on a separately installed Edge TTS command and processes the text you provide through that TTS tool.

This skill appears coherent and purpose-aligned for generating spoken audio. Before installing, make sure the `edge-tts` binary at `/root/.local/bin/edge-tts` comes from a trusted source, use safe output paths such as `/tmp`, and avoid sending highly sensitive text for speech generation.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can generate an audio file from supplied text and write it to the chosen output path.

Why it was flagged

The skill runs a local CLI with user-provided text, voice, and output path. This is expected for text-to-speech generation, but it is still command execution and file-writing behavior users should recognize.

Skill content
/root/.local/bin/edge-tts \
  --voice "$VOICE" \
  --text "$TEXT" \
  --write-media "$OUTPUT"
Recommendation

Use the default temporary output path or another safe location, and do not ask the skill to read text you would not want processed by the TTS tool.

What this means

The behavior depends on whatever `edge-tts` binary is installed at that path.

Why it was flagged

The implementation relies on an external binary that is not included by the skill. This is purpose-aligned, but the installed package's provenance matters.

Skill content
Requires edge-tts installed via pipx. ... `/root/.local/bin/edge-tts`
Recommendation

Install `edge-tts` from a trusted package source and keep it updated; verify the path before using the skill.

What this means

Text submitted for speech generation may be handled by the TTS provider/tool rather than staying only in the chat.

Why it was flagged

The user-provided text is processed through Microsoft Edge TTS for speech synthesis. This is the skill's stated purpose, but it matters for privacy-sensitive text.

Skill content
Generate native-quality English audio using Microsoft Edge TTS (`/root/.local/bin/edge-tts`).
Recommendation

Avoid submitting secrets, private records, or confidential text unless you are comfortable with how the TTS provider processes it.