ifly-hyper-tts

• Analyzed: May 17, 2026, 7:25 AM
• Findings: 1
• Version: 1.0.0
• Hash: 73517289749fd0b0bbc0c144e1526b2475ee74dce491e0f5198fe01c0b9547d4
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate implementation of the iFlytek Hyper-Realistic Text-to-Speech (TTS) service. The Python script (scripts/xfei_hyper_tts.py) correctly implements the WebSocket authentication handshake using HMAC-SHA256 as required by the iFlytek API and handles audio data transmission securely. It requires standard environment variables (XFEI_APP_ID, XFEI_API_KEY, XFEI_API_SECRET) for authentication and does not exhibit any signs of data exfiltration, unauthorized execution, or prompt injection.