espeak-ng

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 7:27 PM UTC
• Version: 1.0.2

Overview

This is a small local text-to-speech skill for espeak-ng, with normal dependency-install caution but no hidden or malicious behavior found.

Install only if you are comfortable adding the espeak-ng system package. Prefer your OS package manager, review any installer source, and treat the direct espeak-ng command examples as local shell commands that should be run only with text you intend to speak.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Behavioral AST: exec() Call, eval() Call, Dynamic Import
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (4)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 89% confidence
• Finding: The skill exposes shell-capable usage (`python ...` and direct `espeak-ng <text>`) but does not declare any `permissions` or `allowed-tools` scope in its metadata. In an agent ecosystem, missing tool scoping can let the skill be invoked with broader execution capability than intended, reducing policy enforcement and increasing the chance of unsafe command execution paths.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

## Requirements
- espeak-ng must be installed on the system
- On Linux/macOS, ensure you have `espeak-ng` installed:
- Ubuntu/Debian: `sudo apt-get install espeak-ng`
- CentOS/RHEL: `sudo yum install espeak-ng`
- macOS: `brew install espeak-ng`
- windows 11 : espeak-ng.msi from https://github.com/espeak-ng/espeak-ng/releases

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

## Requirements
- espeak-ng must be installed on the system
- On Linux/macOS, ensure you have `espeak-ng` installed:
- Ubuntu/Debian: `sudo apt-get install espeak-ng`
- CentOS/RHEL: `sudo yum install espeak-ng`
- macOS: `brew install espeak-ng`
- windows 11 : espeak-ng.msi from https://github.com/espeak-ng/espeak-ng/releases

• Confidence: 70% confidence
• Finding: Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

subprocess module call

Medium

• Category: Dangerous Code Execution

Content

def speak(text, voice="en-us", rate=100, pitch=0.5):
    command = ["espeak-ng", text, "-v", voice, "-a", str(rate), "-p", str(pitch)]
    try:
        process = subprocess.Popen(command, stdout=subprocess.PIPE, stderr=subprocess.PIPE)
        stdout, stderr = process.communicate()
        if stderr:
            print(f"Error: {stderr.decode()}")

• Confidence: 70% confidence
• Finding: subprocess module calls execute external commands. Without careful input validation, this enables command injection.

Static analysis

No suspicious patterns detected.