T08 · Insecure Dependencies
Warning
- Location
SKILL.md:23- Finding
Unpinned Third-Party TTS Dependency Creates Supply-Chain Risk
- Content
View full analysis
- Remediation
View remediation
Security audit
Feishu Voice Bubble
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward Feishu voice-message helper, but users should treat generated speech text as data sent to Microsoft Edge TTS and be careful with npm dependency installation and output paths.
Before installing, confirm you are comfortable sending the text to Microsoft Edge TTS, avoid sensitive or regulated content unless approved, pin and review the npm dependency, and keep generated audio paths inside a dedicated output directory.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Findings (2)
T09 · Insecure Skill Coding Practices
Warning
- Location
scripts/gen_voice.js:112- Finding
Caller-Controlled Output Path Allows Unrestricted File Creation or Overwrite
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (7)
Tp4
High
- Category
- MCP Tool Poisoning
- Confidence
- 95% confidence
- Finding
The skill claims end-to-end Feishu voice-bubble delivery, but the documented behavior only covers local audio generation and relies on an implied external plugin behavior to actually send messages. This mismatch is dangerous because users may assume the skill has Feishu-native sending guarantees, permission boundaries, and message-delivery behavior that are not actually implemented or documented, leading to misuse, failed controls, or unsafe automation assumptions.
- Content
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/gen_voice.js "你好世界" output.opus
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/gen_voice.js "你好世界" output.opus
Ae1
High
- Category
- analysis-evasion
- Confidence
- 100% confidence
- Finding
Referenced artifact was not completely inspected
- Content
md node scripts/gen_voice.js "你好世界" output.opus
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The skill prominently advertises free Edge TTS usage but does not clearly warn up front that message text is sent to a Microsoft-hosted external service for synthesis. This is a meaningful privacy and data-handling issue because users may provide sensitive or regulated content under the assumption processing is local or confined to Feishu.
- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 88% confidence
- Finding
The invocation guidance uses broad trigger phrases such as requests for voice messages or audio replies without clearly constraining when the skill should activate. Overbroad triggers can cause accidental invocation on unrelated chat content, increasing the chance that sensitive text is converted and transmitted to an external TTS service without sufficiently explicit user intent.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The script sends arbitrary input text to Microsoft's Edge TTS service via a network request, but the CLI/help text only says 'No API key required' and does not clearly warn users that message content leaves the local environment. In a Feishu messaging skill, users may provide chat content, internal notes, or personal data expecting local conversion, so this creates a real privacy and data-handling risk even though it is not an exploit primitive like code execution.
- Content
Static analysis
No suspicious patterns detected.