OpenAI TTS

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent OpenAI text-to-speech helper that uses your OpenAI API key to send provided text to OpenAI, with only minor packaging and credential-use notes.

This skill appears safe for its stated purpose. Before installing, make sure you are comfortable sending the text to OpenAI, understand possible API charges, keep your API key protected, and ensure jq is installed even though it is not declared in the requirements.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may consume OpenAI account quota or incur charges under the configured API key.

Why it was flagged

The skill requires an OpenAI API credential. This is expected for the stated OpenAI TTS purpose, but it can authorize account usage and billing.

Skill content
Set `OPENAI_API_KEY`, or configure in `~/.clawdbot/clawdbot.json` ... apiKey: "sk-..."
Recommendation

Use a dedicated or appropriately scoped OpenAI API key where possible, and avoid sharing the local config file that stores it.

What this means

Any text you ask it to convert is transmitted to OpenAI, so sensitive or confidential text leaves the local environment.

Why it was flagged

The script sends the generated JSON payload, including the provided text, to OpenAI's audio speech API. This is disclosed and purpose-aligned.

Skill content
curl -sS https://api.openai.com/v1/audio/speech ... -d "$json"
Recommendation

Only convert text you are comfortable sending to OpenAI, and follow your organization's policy for third-party AI services.

What this means

The skill may fail at runtime on systems that have curl but not jq installed.

Why it was flagged

The script invokes jq to JSON-escape the text, but the supplied requirements declare curl as the only required binary. This is a packaging completeness issue rather than suspicious behavior.

Skill content
"input": $(printf '%s' "$text" | jq -Rs .),
Recommendation

Install jq before use or update the skill metadata to declare jq as a required binary.