ClawHub
Back to skill

Security audit

Text-to-Speech

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward SenseAudio text-to-speech API guide that sends user-provided text to the disclosed provider endpoint and saves returned audio in examples.

Install only if you intend to use SenseAudio's hosted TTS service. Treat the text you submit as data sent to that provider, protect SENSEAUDIO_API_KEY like a secret, and change the sample output filenames if you do not want response.json or output.mp3 overwritten.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (18)

Natural-Language Policy Violations

Medium
Confidence
79% confidence
Finding
The description states support for Chinese and English, and the document is then duplicated in English and Chinese, but it does not explicitly offer a user language or locale choice. The policy requires avoiding forced language/locale behavior unless the skill offers opt-in or clearly documents a justified locale constraint.

External Transmission

Medium
Category
Data Exfiltration
Content
SenseAudio TTS converts text to natural, emotionally rich speech using a large language model. Supports 10+ emotions, streaming output (SSE), and fine-grained voice control.

**Endpoint:** `POST https://api.senseaudio.cn/v1/t2a_v2`
**Auth:** `Authorization: Bearer $SENSEAUDIO_API_KEY`
**Max text length:** 10,000 characters
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
SenseAudio TTS converts text to natural, emotionally rich speech using a large language model. Supports 10+ emotions, streaming output (SSE), and fine-grained voice control.

**Endpoint:** `POST https://api.senseaudio.cn/v1/t2a_v2`
**Auth:** `Authorization: Bearer $SENSEAUDIO_API_KEY`
**Max text length:** 10,000 characters
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
SenseAudio TTS converts text to natural, emotionally rich speech using a large language model. Supports 10+ emotions, streaming output (SSE), and fine-grained voice control.

**Endpoint:** `POST https://api.senseaudio.cn/v1/t2a_v2`
**Auth:** `Authorization: Bearer $SENSEAUDIO_API_KEY`
**Max text length:** 10,000 characters
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
SenseAudio TTS converts text to natural, emotionally rich speech using a large language model. Supports 10+ emotions, streaming output (SSE), and fine-grained voice control.

**Endpoint:** `POST https://api.senseaudio.cn/v1/t2a_v2`
**Auth:** `Authorization: Bearer $SENSEAUDIO_API_KEY`
**Max text length:** 10,000 characters
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
SenseAudio TTS converts text to natural, emotionally rich speech using a large language model. Supports 10+ emotions, streaming output (SSE), and fine-grained voice control.

**Endpoint:** `POST https://api.senseaudio.cn/v1/t2a_v2`
**Auth:** `Authorization: Bearer $SENSEAUDIO_API_KEY`
**Max text length:** 10,000 characters
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
SenseAudio TTS converts text to natural, emotionally rich speech using a large language model. Supports 10+ emotions, streaming output (SSE), and fine-grained voice control.

**Endpoint:** `POST https://api.senseaudio.cn/v1/t2a_v2`
**Auth:** `Authorization: Bearer $SENSEAUDIO_API_KEY`
**Max text length:** 10,000 characters
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
SenseAudio TTS converts text to natural, emotionally rich speech using a large language model. Supports 10+ emotions, streaming output (SSE), and fine-grained voice control.

**Endpoint:** `POST https://api.senseaudio.cn/v1/t2a_v2`
**Auth:** `Authorization: Bearer $SENSEAUDIO_API_KEY`
**Max text length:** 10,000 characters
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
## Code Examples

### curl (non-streaming)

```bash
curl -X POST https://api.senseaudio.cn/v1/t2a_v2 \
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
```python
import requests

resp = requests.post(
    "https://api.senseaudio.cn/v1/t2a_v2",
    headers={"Authorization": "Bearer YOUR_API_KEY", "Content-Type": "application/json"},
    json={
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
```python
import requests

resp = requests.post(
    "https://api.senseaudio.cn/v1/t2a_v2",
    headers={"Authorization": "Bearer YOUR_API_KEY", "Content-Type": "application/json"},
    json={
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
```python
import requests

resp = requests.post(
    "https://api.senseaudio.cn/v1/t2a_v2",
    headers={"Authorization": "Bearer YOUR_API_KEY", "Content-Type": "application/json"},
    json={
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
```python
import requests

resp = requests.post(
    "https://api.senseaudio.cn/v1/t2a_v2",
    headers={"Authorization": "Bearer YOUR_API_KEY", "Content-Type": "application/json"},
    json={
Confidence
70% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
```python
import requests

resp = requests.post(
    "https://api.senseaudio.cn/v1/t2a_v2",
    headers={"Authorization": "Bearer YOUR_API_KEY", "Content-Type": "application/json"},
    json={
Confidence
70% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
```python
import requests

resp = requests.post(
    "https://api.senseaudio.cn/v1/t2a_v2",
    headers={"Authorization": "Bearer YOUR_API_KEY", "Content-Type": "application/json"},
    json={
Confidence
70% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
### curl（非流式）

```bash
curl -X POST https://api.senseaudio.cn/v1/t2a_v2 \
  -H "Authorization: Bearer $SENSEAUDIO_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Missing User Warnings

Low
Confidence
87% confidence
Finding
The curl example saves API output to `response.json` and then writes decoded audio to `output.mp3`, but the surrounding documentation does not warn that running the commands will create or overwrite local files. Under the markdown-file criteria, file-affecting behavior should be disclosed when it may impact user data or system state.

Missing User Warnings

Low
Confidence
90% confidence
Finding
Both Python examples write synthesized audio to `output.mp3`, and the documentation does not alert the user that executing them will create or overwrite that file. For markdown documentation, user-facing warnings should mention behaviors that modify local data or files.

Static analysis

No suspicious patterns detected.