Elevenlabs Tts

• Analyzed: May 12, 2026, 3:22 AM
• Findings: 1
• Version: 2.4.0
• Hash: 58228ad4a28fb47b7172b24e9eb08b1bd60a8e4b621d98912288848e3afbecda
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides ElevenLabs TTS integration but relies on the agent executing shell commands via the 'exec' tool for file discovery, audio conversion with ffmpeg, and file management (cp, rm) as detailed in SKILL.md. While these actions are plausibly necessary for the stated goal of sending WhatsApp voice notes, the use of complex shell pipelines and hardcoded paths like '/root/.openclaw/workspace/' represents a high-risk capability that could be exploited for shell injection or unauthorized file access if the agent processes unsanitized user input.