Qwen3-TTS VoiceDesign

• Analyzed: May 11, 2026, 4:41 AM
• Findings: 1
• Version: 1.0.0
• Hash: ae439b3de2b60569aa46eca9be7bea301d8ab191bf7483522636325e01249898
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious due to a critical shell injection vulnerability in `scripts/batch_seeds.sh` where the `TEXT` variable is unsafely interpolated into a `curl -d` argument, allowing arbitrary command execution if user input contains shell metacharacters. Additionally, the `SKILL.md` documentation instructs users to set up a Windows scheduled task with `highest privileges` for server auto-restart, which is a significant security risk and persistence mechanism. The `tts_server.py` also defaults to binding on `0.0.0.0`, exposing the service to the network by default.