Pocket Tts

• Analyzed: May 12, 2026, 3:02 AM
• Findings: 1
• Version: 1.0.1
• Hash: 300baa55165dac576254cdeec4224f8b277afb5241a5712d3e5fd839ec40166f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. All files (SKILL.md, install.sh, test.sh, cli.py) are clearly aligned with the stated purpose of providing local text-to-speech functionality using the `pocket-tts` library. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. The `install.sh` script installs standard Python dependencies, and `cli.py` uses `os.system` only for a hardcoded, local command (`pocket-tts serve`) to start a local HTTP server, which is a documented feature and not indicative of malicious intent or arbitrary command execution.