v1.0.0

Edge TTS 儿童配音定制版

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:37 AM.

Analysis

This TTS skill appears purpose-aligned, but users should notice that it sends text to an external Microsoft TTS service and relies on an external Edge TTS dependency/script.

GuidanceThis skill looks appropriate for generating Chinese/kids TTS audio. Before installing, be comfortable with text being sent to Microsoft’s TTS service and with generated MP3 files being returned directly to the chat; review or pin the referenced Edge TTS dependency if you need stronger supply-chain control.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

SKILL.md

生成的配音文件必须直接发送到对话！ ... message({ action: "send", path: "生成的音频文件.mp3" })

The skill directs the agent to use a messaging/file-send tool to return generated MP3 files automatically. This matches the advertised purpose, but it is still a tool action that shares generated content into the conversation.

User impactGenerated audio may be posted back to the current chat immediately after creation.

RecommendationUse it for content you are comfortable sharing in the current conversation, and ask the agent to confirm before sending if the text or audio is sensitive.

Agentic Supply Chain Vulnerabilities

SeverityLowConfidenceHighStatusNote

skill-info.json

"dependencies": {
    "edge-tts": "latest"
  }

The skill declares an unpinned dependency on edge-tts. This is purpose-aligned for TTS, but a moving latest dependency can change over time.

User impactFuture behavior may depend on whatever version of the external Edge TTS dependency is resolved.

RecommendationPrefer a pinned, known-good dependency version or review the referenced Edge TTS skill/package before relying on it.

Sensitive data protection

Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.

Insecure Inter-Agent Communication

SeverityLowConfidenceHighStatusNote

SKILL.md

- 使用 Microsoft Edge 神经语音服务
- 无需 API Key（免费）
- 输出 MP3 格式
- 需要网络连接

The artifacts disclose that TTS generation uses Microsoft Edge neural voice service over the network. That is expected for this skill, but user-provided text may leave the local environment for processing.

User impactText submitted for voice generation may be sent to Microsoft’s TTS service.

RecommendationAvoid submitting private, confidential, or regulated text unless you are comfortable with that external service processing it.