Jarvis Tts

• Analyzed: May 12, 2026, 4:31 AM
• Findings: 1
• Version: 1.0.0
• Hash: f825f6409e779284f421c70f74330b9ab58af77c4d0fdec8e3aa8cbcd7501928
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills bundle implements a text-to-speech utility using `edge-tts` and `afplay`. The `SKILL.md` file provides clear, benign instructions and documentation without any prompt injection attempts. The Python script `scripts/jarvis-tts.py` securely executes external commands (`edge_tts` and `afplay`) using `subprocess.run` with argument lists, preventing shell injection vulnerabilities. Temporary files are created and cleaned up properly. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation.