小米 TTS Proxy

• Analyzed: May 10, 2026, 6:31 AM
• Findings: 1
• Version: 1.0.2
• Hash: 5760ccde5fa43379cd7bb23ff2082990737e3ee393a7ddf78a5869b391b51917
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate proxy service for converting OpenAI-compatible TTS requests to the Xiaomi TTS API. The core logic in `tts-proxy.mjs` uses standard Node.js modules and safely invokes FFmpeg via `spawn` with an arguments array, avoiding shell injection vulnerabilities. While it suggests installing a systemd service for persistence, this is explicitly documented and appropriate for its stated purpose as a local background service.