Security audit

Sapi Tts

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward Windows text-to-speech helper that saves generated audio locally and only suggests an optional third-party voice adapter.

Before installing, remember that generated audio files may contain the text you spoke and will be stored locally by default. The optional neural-voice adapter is third-party software from GitHub; install it only if you trust that project and can verify the downloaded release.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:203
Finding: Unpinned Third-Party SAPI Adapter Installation Recommendation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The embedded script sets -Language to fr by default, which forces a specific locale behavior when the user does not choose one. The skill description also presents French as the default without explaining or justifying that locale preference as region-specific.
Content: No source excerpt is available for this finding.

Missing User Warnings

Low

Category: Not specified by scanner
Confidence: 95% confidence
Finding: This markdown file embeds a script that automatically creates a directory under the user's profile and saves generated audio there when no output path is provided. The surrounding skill description explains how to use the feature but does not clearly warn users that audio content will be persisted locally by default.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.