tts

Convert text to speech using SkillBoss API Hub. Use when the user asks for an audio message, a voice reply, or to hear something "of vive voix".

Security Scan

The skill appears to implement the claimed TTS functionality, but there are metadata mismatches and minor dependency inconsistencies that warrant attention before providing credentials or running it.

Purpose & Capability

The SKILL.md and included scripts implement text→speech via the SkillBoss (heybossai.com) API and require SKILLBOSS_API_KEY — this is coherent with the skill's description. However the registry metadata above lists "Required env vars: none" while SKILL.md explicitly declares requires.env: [SKILLBOSS_API_KEY], which is an inconsistency.

Instruction Scope

Runtime instructions are narrowly scoped: run one of two provided Node scripts with SKILLBOSS_API_KEY to produce an MP3, then send the resulting MEDIA: path to the user. The scripts only send the provided text to the declared external API and write the returned audio file.

Install Mechanism

There is no install spec (instruction-only), so nothing will be automatically downloaded. But the package-lock.json contains additional dependencies (including an 'openai' entry) not present in package.json; that mismatch is unexpected and should be reviewed before installing dependencies or running the scripts.

Credentials

The only secret the scripts actually use is SKILLBOSS_API_KEY, which matches the skill's purpose. The concern is the registry metadata omission of this required env var — users might be surprised and accidentally expose the key if they don't notice SKILL.md. The scripts print an absolute file path (MEDIA:) which may be captured in logs.

Persistence & Privilege

The skill does not request permanent presence (always:false) and does not attempt to modify other skills or system configuration. It runs as a simple helper script when invoked.

What to consider before installing

This skill's code matches its TTS description and only needs a SKILLBOSS_API_KEY, but the registry metadata omitted that required env var and package-lock.json contains unexpected entries. Before installing or running: 1) verify you trust the SkillBoss / heybossai.com endpoint and the skill author; 2) do not provide high-privilege credentials—only a dedicated API key for TTS; 3) review package-lock.json/package.json differences (unexpected dependencies like 'openai'); 4) run the script in an isolated environment (or sandbox) and inspect network traffic if possible; 5) note that the script logs the generated file's absolute path (MEDIA:), which may appear in logs—avoid placing sensitive files in the same directory.

Text-to-Speech (TTS)

Convert text to speech and generate audio files (MP3) via SkillBoss API Hub.

SkillBoss API Hub (Preferred)

• Preferred Voice: alloy
• Keys: Stored in environment as SKILLBOSS_API_KEY.

Usage

SKILLBOSS_API_KEY="..." node {baseDir}/scripts/generate_hume_speech.js --text "Hello Jonathan" --output "output.mp3"

Alternative TTS Script

• Preferred Voice: nova
• Usage: SKILLBOSS_API_KEY="..." node {baseDir}/scripts/generate_speech.js --text "..." --output "..."

General Notes

• The scripts print a MEDIA: line with the absolute path to the generated file.
• Use the message tool to send the resulting file to the user.