Sherpa Onnx Tts Local

PassAudited by ClawScan on May 12, 2026.

Overview

This appears to be a local/offline text-to-speech skill, with the main caution that setup downloads native sherpa-onnx archives and the referenced wrapper was not included in the scanned package.

This skill is reasonable for local text-to-speech if you are comfortable installing sherpa-onnx runtime/model archives from GitHub. Verify the download source, confirm the missing wrapper file is present and trusted before adding it to PATH or running it, and configure the runtime/model environment variables to local directories you control.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill may require trusting downloaded native binaries from GitHub before using the local TTS workflow.

Why it was flagged

Setup obtains and extracts a native sherpa-onnx runtime archive from GitHub. This is purpose-aligned for local TTS, but the artifacts do not show checksum or signature verification.

Skill content
"kind": "download", "url": "https://github.com/k2-fsa/sherpa-onnx/releases/download/v1.12.23/sherpa-onnx-v1.12.23-linux-x64-shared.tar.bz2", "extract": true, "targetDir": "runtime"
Recommendation

Install only if you trust the k2-fsa sherpa-onnx release source, and prefer verifying checksums or release signatures where available.

What this means

The documented command may fail or may rely on a wrapper not included in the scanned artifact set.

Why it was flagged

The provided manifest lists only SKILL.md and _meta.json, so the referenced bin wrapper was not available for review. This looks like incomplete packaging rather than hidden behavior, but it is a provenance gap.

Skill content
The wrapper lives in this skill folder. Run it directly, or add the wrapper to PATH:
Recommendation

Before running commands from this skill, confirm that the expected bin/sherpa-onnx-tts wrapper exists and comes from a trusted package.

What this means

Using the skill involves running local executable code to generate audio files.

Why it was flagged

The normal workflow executes a local CLI/wrapper and writes an output WAV file. This is expected for a local TTS skill and is user-directed.

Skill content
{baseDir}/bin/sherpa-onnx-tts -o ./tts.wav "Hello from local TTS."
Recommendation

Run it only from the expected skill directory, choose output paths intentionally, and avoid adding unverified directories to PATH.