OpenAI TTS
PassAudited by ClawScan on May 1, 2026.
Overview
This is a coherent OpenAI text-to-speech helper that uses your OpenAI API key to send provided text to OpenAI, with only minor packaging and credential-use notes.
This skill appears safe for its stated purpose. Before installing, make sure you are comfortable sending the text to OpenAI, understand possible API charges, keep your API key protected, and ensure jq is installed even though it is not declared in the requirements.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill may consume OpenAI account quota or incur charges under the configured API key.
The skill requires an OpenAI API credential. This is expected for the stated OpenAI TTS purpose, but it can authorize account usage and billing.
Set `OPENAI_API_KEY`, or configure in `~/.clawdbot/clawdbot.json` ... apiKey: "sk-..."
Use a dedicated or appropriately scoped OpenAI API key where possible, and avoid sharing the local config file that stores it.
Any text you ask it to convert is transmitted to OpenAI, so sensitive or confidential text leaves the local environment.
The script sends the generated JSON payload, including the provided text, to OpenAI's audio speech API. This is disclosed and purpose-aligned.
curl -sS https://api.openai.com/v1/audio/speech ... -d "$json"
Only convert text you are comfortable sending to OpenAI, and follow your organization's policy for third-party AI services.
The skill may fail at runtime on systems that have curl but not jq installed.
The script invokes jq to JSON-escape the text, but the supplied requirements declare curl as the only required binary. This is a packaging completeness issue rather than suspicious behavior.
"input": $(printf '%s' "$text" | jq -Rs .),
Install jq before use or update the skill metadata to declare jq as a required binary.
