Aliyun TTS

• Analyzed: May 12, 2026, 3:08 AM
• Findings: 1
• Version: 1.0.0
• Hash: 751401e8bdfcebb39e8ef287ddc367ef50457335ede856b6ea3f9c1819784f72
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. The `aliyun_tts.py` script correctly implements an Alibaba Cloud Text-to-Speech client, reading necessary API credentials from environment variables and making legitimate API calls to `aliyuncs.com` domains. The `SKILL.md` documentation provides clear instructions for configuration and usage, without any evidence of prompt injection or attempts to mislead the agent. The ability to specify an output file path for the generated audio is a core, expected feature of a TTS skill and not indicative of malicious intent.