Security audit
Security checks across malware telemetry and agentic risk
This skill appears to be a disclosed local voice service with normal setup, background-service, and model-download risks, not evidence of malicious behavior.
Install only if you are comfortable with a background macOS user service that starts at login, listens on localhost, installs Homebrew/Swift dependencies, and may download speech models before operating locally. Review the setup script first and be prepared to unload the LaunchAgent and remove the installed files if you want to disable it.
### 4. Create LaunchAgent ```bash cat > ~/Library/LaunchAgents/com.stella.tts.plist << 'EOF' <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0">
```bash
cat > ~/Library/LaunchAgents/com.stella.tts.plist << 'EOF'
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>```bash
cat > ~/Library/LaunchAgents/com.stella.tts.plist << 'EOF'
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>cat > ~/Library/LaunchAgents/com.stella.tts.plist << 'EOF'
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.stella.tts</string><key>StandardErrorPath</key>
<string>$HOME/.clawdbot/logs/stella-tts.err.log</string>
</dict>
</plist>
EOF
launchctl load ~/Library/LaunchAgents/com.stella.tts.plist</plist> EOF launchctl load ~/Library/LaunchAgents/com.stella.tts.plist ``` ## API Endpoints
</plist> EOF launchctl load ~/Library/LaunchAgents/com.stella.tts.plist ``` ## API Endpoints
66/66 vendors flagged this skill as clean.
No suspicious patterns detected.