Mac TTS

Security checks across malware telemetry and agentic risk

Overview

This is a simple instruction-only macOS text-to-speech skill; it uses expected local commands, with minor notes about audible output, volume changes, and under-declared macOS requirements.

This skill appears safe and purpose-aligned for macOS text-to-speech. Before installing or using it, note that it can make your computer speak out loud and the examples include commands to unmute or change system volume. It should be treated as macOS-only despite the registry metadata not enforcing that restriction.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

The agent may speak through the Mac speakers or adjust volume if the user follows or authorizes these instructions.

Why it was flagged

The skill documents local commands that can change the user's system volume before speaking. This fits the text-to-speech purpose, but it is still a user-impacting local action.

Skill content
osascript -e "set volume output volume 70"
Recommendation

Use the skill only when audible output is desired, and review any volume-changing command before running it.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

The skill may fail or behave unexpectedly on non-macOS systems, but the artifacts do not show hidden installation or code execution.

Why it was flagged

The metadata does not declare the macOS-only environment or the built-in commands used by the skill, while SKILL.md says it works only on macOS.

Skill content
OS restriction: none; Required binaries (all must exist): none
Recommendation

Treat this as macOS-only and consider declaring macOS plus the expected built-in commands in the skill metadata.