OpenAI TTS

• Analyzed: May 13, 2026, 3:00 AM
• Findings: 1
• Version: 1.0.0
• Hash: 6b947e48bcb3aeac0c752eaac2e32f05db335e7e9aa7e044836cee204196beeb
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. The `SKILL.md` provides clear, descriptive instructions without any prompt injection attempts. The `scripts/speak.sh` script correctly interacts with the legitimate OpenAI TTS API endpoint (`https://api.openai.com/v1/audio/speech`), uses the `OPENAI_API_KEY` as expected, and safely escapes user input for the JSON payload using `jq -Rs .`. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or obfuscation.