Security audit
Security checks across malware telemetry and agentic risk
This appears to be a legitimate local voice service, but it needs review because it installs an always-on background daemon, may download models despite offline claims, and logs transcript snippets locally.
Install only if you are comfortable with a user-level macOS background service that starts at login, listens on localhost, installs/builds dependencies, and may download speech models before offline use. Avoid using it for sensitive speech unless transcript-content logging is removed or disabled, and make sure you know how to unload the LaunchAgent and delete the installed files.
cat > ~/Library/LaunchAgents/com.stella.tts.plist << 'EOF'
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.stella.tts</string><key>StandardErrorPath</key>
<string>$HOME/.clawdbot/logs/stella-tts.err.log</string>
</dict>
</plist>
EOF
launchctl load ~/Library/LaunchAgents/com.stella.tts.plist# Create LaunchAgent echo "⚙️ Creating LaunchAgent..." cat > "$PLIST_DIR/com.stella.voice.plist" << EOF <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0">
# Create LaunchAgent echo "⚙️ Creating LaunchAgent..." cat > "$PLIST_DIR/com.stella.voice.plist" << EOF <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0">
echo "⚙️ Creating LaunchAgent..."
cat > "$PLIST_DIR/com.stella.voice.plist" << EOF
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>echo "⚙️ Creating LaunchAgent..."
cat > "$PLIST_DIR/com.stella.voice.plist" << EOF
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>cat > "$PLIST_DIR/com.stella.voice.plist" << EOF
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>Label</key>
<string>com.stella.voice</string><key>WorkingDirectory</key>
<string>${HOME}</string>
</dict>
</plist>
EOF
# Load service# Load service echo "🔄 Loading service..." launchctl unload "$PLIST_DIR/com.stella.voice.plist" 2>/dev/null || true launchctl load "$PLIST_DIR/com.stella.voice.plist" # Wait for startup
# Load service echo "🔄 Loading service..." launchctl unload "$PLIST_DIR/com.stella.voice.plist" 2>/dev/null || true launchctl load "$PLIST_DIR/com.stella.voice.plist" # Wait for startup
# Load service echo "🔄 Loading service..." launchctl unload "$PLIST_DIR/com.stella.voice.plist" 2>/dev/null || true launchctl load "$PLIST_DIR/com.stella.voice.plist" # Wait for startup echo "⏳ Waiting for models to load (~15s)..."
# Load service echo "🔄 Loading service..." launchctl unload "$PLIST_DIR/com.stella.voice.plist" 2>/dev/null || true launchctl load "$PLIST_DIR/com.stella.voice.plist" # Wait for startup echo "⏳ Waiting for models to load (~15s)..."
# Load service echo "🔄 Loading service..." launchctl unload "$PLIST_DIR/com.stella.voice.plist" 2>/dev/null || true launchctl load "$PLIST_DIR/com.stella.voice.plist" # Wait for startup echo "⏳ Waiting for models to load (~15s)..."
66/66 vendors flagged this skill as clean.
No suspicious patterns detected.