macOS Local Voice

PassAudited by ClawScan on May 10, 2026.

Overview

This skill appears to provide the advertised local macOS speech-to-text and text-to-speech functions, with expected local command execution and optional voice-note sending that users should be aware of.

Install this only on macOS, verify the Homebrew dependencies before use, and remember that the offline claim applies to STT/TTS processing. If you use the voice-note send example, the generated audio will leave the local machine through your messaging tool.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

When used, the skill will run local audio-related binaries on the Mac.

Why it was flagged

The skill runs native macOS command-line tools to synthesize audio. This is local code execution from PATH, but it is clearly part of the advertised TTS behavior and uses argument arrays rather than a shell command string.

Skill content
execFileSync("say", sayArgs, { stdio: ["pipe", "pipe", "pipe"] });
Recommendation

Install and keep only trusted versions of the required binaries in PATH, and review any user-specified output path before generating audio.

What this means

If an external dependency is compromised or unexpected, the skill could execute untrusted local code when transcribing or converting audio.

Why it was flagged

The skill depends on external Homebrew packages that are not version-pinned in the artifacts. These dependencies are expected for the STT/TTS purpose, but their provenance affects the safety of the local commands the skill runs.

Skill content
brew install finnvoor/tools/yap   # STT
brew install ffmpeg                # audio format conversion (optional but recommended)
Recommendation

Verify the Homebrew tap and ffmpeg source before installing, and prefer trusted or pinned package versions where possible.

What this means

Generated audio may be sent through the messaging environment if this step is used.

Why it was flagged

The skill documents using the message tool to send the generated audio file as a voice note. This is disclosed and relevant to the use case, but it is an outbound action beyond purely local audio generation.

Skill content
message action=send media=<path_from_tts.sh> asVoice=true
Recommendation

Use the message-send step only when the user explicitly wants to send a voice note, and review the generated file and destination first.