Back to skill
Skillv0.1.0
ClawScan security
text-to-speech · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 14, 2026, 1:39 PM
- Verdict
- Benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only guide for TTS audio mastering and is internally consistent with its stated purpose, with only minor documentation omissions (tools referenced but not declared).
- Guidance
- This is a documentation-only skill describing best practices for TTS audio mastering. Before installing or using it, verify that your environment has the tools the guide references (e.g., FFmpeg with ebur128/loudnorm support, any chosen TTS engine). If you plan to use cloud TTS, be prepared to supply API keys via your normal configuration — the skill does not request or store credentials. Also confirm any licensing or usage limits of the TTS engine you pick. If you need the skill to be executable end-to-end, ask the author to list required binaries and sample FFmpeg commands explicitly so the agent won't fail due to missing tools.
Review Dimensions
- Purpose & Capability
- noteThe name and description match the SKILL.md content: both focus on cleanup, loudness normalization, timing, and delivery for TTS audio. The only discrepancy is that the instructions assume use of external tools (FFmpeg, loudness meters, various TTS engines) but the skill's metadata declares no required binaries or environment variables — this is a documentation omission rather than functional mismatch.
- Instruction Scope
- okThe instructions stay on-topic: they describe audio filters, loudness targets, segment timing, and workflow steps. They do not direct the agent to read unrelated files, exfiltrate data, or perform system-wide configuration changes. They reference external TTS engines and FFmpeg usage but do not include open-ended or vague commands that would grant broad discretion.
- Install Mechanism
- okThis is an instruction-only skill with no install spec and no code files, so there is no installation footprint or network downloads to evaluate.
- Credentials
- noteThe skill requests no environment variables or credentials, which is appropriate for a standalone guidance document. It mentions cloud TTS providers (e.g., OpenAI TTS, Edge-TTS) which, if used, would require credentials; the SKILL.md does not instruct how to supply or store those credentials. Users should expect to provide any needed API keys via their normal environment/config if they use cloud services.
- Persistence & Privilege
- okThe skill does not request persistent presence (always is false) and does not ask to modify system or other skills' configuration. Autonomous invocation is allowed by default on the platform but this skill's scope and lack of credentials mitigate that concern.