Dictation Audio

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:29 PM UTC
• Version:
  2.0.0

Overview

This skill is a straightforward dictation audio generator, with ordinary cautions around third-party text-to-speech, ffmpeg, and a fixed output file.

Install only if you are comfortable using edge-tts and ffmpeg from trusted sources. Avoid entering confidential words or names unless you accept the text-to-speech provider’s data handling, and remember each run writes to /tmp/dictation.mp3 and may replace that file.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Behavioral AST: exec() Call, eval() Call, Dynamic Import
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

subprocess module call

Medium

• Category: Dangerous Code Execution

Content

"-c", "copy",
            output_path
        ]
        result = subprocess.run(cmd, capture_output=True, timeout=60)
        return result.returncode == 0
    finally:
        if os.path.exists(list_file):

• Confidence: 76% confidence
• Finding: result = subprocess.run(cmd, capture_output=True, timeout=60)

VirusTotal

53/53 vendors flagged this skill as clean.