v1.1.0

Sapi Tts

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:24 AM.

Analysis

The artifacts show a coherent Windows text-to-speech helper, with the main user-visible risks being manual PowerShell setup and local audio file creation/playback.

GuidanceThis appears safe for a local Windows text-to-speech use case. Before installing, review the embedded PowerShell script, save it only where intended, and remember that generated WAV files will be stored locally and optionally played aloud.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

SKILL.md

Save the script below as `tts.ps1` in your skills folder:

The runnable helper is delivered as Markdown instructions rather than a packaged code file or install spec, so the user should review the copied script before installing it.

User impactInstalling the skill requires manually adding a local PowerShell script to the skills folder.

RecommendationReview the embedded script before saving it, and keep it in the intended skills directory.

Unexpected Code Execution

SeverityLowConfidenceHighStatusNote

SKILL.md

Add-Type -AssemblyName System.Speech ... $synth.SetOutputToWaveFile($Output) ... if ($Play) { Add-Type -AssemblyName PresentationCore ... $player.Play() }

The skill uses a local PowerShell/.NET script to synthesize speech, write a WAV file, and optionally play it. This is expected for the stated TTS purpose, but it is still local code execution.

User impactRunning the helper will create an audio file and may play sound if the -Play option is used.

RecommendationRun it only for text you intend to synthesize, and specify output paths deliberately if overriding the default.