Feishu Voice (NoizAI)

• Analyzed: May 8, 2026, 4:26 PM
• Findings: 1
• Version: 1.1.0
• Hash: e4746a93ab57590a7564ec553b227a82a8dff7e0b6013c690e11af5d57756525
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a functional wrapper for generating voice messages via NoizAI TTS for delivery to Feishu. The script `scripts/voice.py` safely invokes a secondary TTS engine using subprocess calls with argument lists (avoiding shell injection), and the instructions in `SKILL.md` are transparent about data being sent to the noiz.ai API for synthesis. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.