SAM TTS

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to do what it says: install a SAM text-to-speech library, generate local WAV audio, and optionally remember a user-controlled voice mode.

Before installing, be comfortable with the npm dependency and with the skill creating local WAV files. If you enable /sam on, remember that future responses may be audio until you disable it with /sam off.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill will create local audio files and may produce audio for responses when SAM mode is enabled.

Why it was flagged

The skill instructs the agent to run a local Node.js helper and write WAV files. This is expected for text-to-speech generation and the documented workflow uses a temporary output path.

Skill content
Convert to SAM TTS: `node scripts/sam-tts-wrapper.js "response" --output=/tmp/sam-XXX.wav --quiet`
Recommendation

Use /sam off when you no longer want responses converted to audio, and keep generated output paths limited to temporary or intended directories.

What this means

Installing the skill requires trusting the sam-js npm package used to synthesize audio.

Why it was flagged

The skill relies on an external npm dependency for the SAM engine. This is purpose-aligned, and the provided package-lock.json pins sam-js 0.3.1 with an integrity hash.

Skill content
"dependencies": {
    "sam-js": "^0.3.0"
  }
Recommendation

Install using the provided lockfile where possible, and review or pin the dependency if you require stricter supply-chain controls.

What this means

If SAM mode is left on, later responses may continue being spoken as audio until the state is changed.

Why it was flagged

The skill stores persistent mode and voice-parameter state that is reused across sessions. The stored data is not sensitive and the behavior is disclosed, but it can affect future responses.

Skill content
State file: `memory/sam-mode.json` ... Read at session start. Update when user toggles mode or changes parameters.
Recommendation

Use /sam status or /sam off to manage the mode, and delete or reset memory/sam-mode.json if you want to clear the saved preference.