Coze Tts

• Analyzed: Mar 25, 2026, 3:46 PM
• Findings: 1
• Version: 1.0.3
• Hash: 2602159597f5d63fd67559cb7cb2d45263ad8db7e8b5e566021635a1fe3f76ca
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate Text-to-Speech utility that interfaces with the official Coze API (api.coze.cn). The primary script, scripts/text_to_speech.sh, uses standard tools like curl and jq to send user-provided text to the API and save the resulting audio file, with no evidence of data exfiltration, malicious execution, or prompt injection.