Local Llama TTS

• Analyzed: May 12, 2026, 4:11 AM
• Findings: 1
• Version: 1.0.0
• Hash: ebbedb1f553112f2c8ac91adcfe03fb90cafe01594b69a6ac10d19279c26e63b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The `scripts/tts-local.sh` script is vulnerable to shell injection. The `$SPEAKER_PARAM` variable is constructed using user-supplied input (the speaker file path) and then expanded unquoted in the final `llama-tts` command. This allows an attacker to inject arbitrary shell commands by providing specially crafted input to the `-s` or `--speaker` option, leading to potential remote code execution if the agent executes this skill with untrusted input.