41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill's purpose (text-to-speech) matches its contents, but the implementation executes shell commands with user-controlled text (via exec) which can allow command injection — review or patch befor...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1770133962546,
        "_id": "k9726e0nwzp165zs6zw4sbrgg580er00",
        "changelog": "- Added CHANGELOG.md and README.md files for clearer documentation.\n- Updated skill features and usage: introduced direct speaking (\"speak\" action), playback (\"play\" action), and voice listing (\"voices\" action).\n- Enhanced control over file cleanup timing and playback behavior.\n- Updated supported options and voices to provide more flexibility and broader language support.\n- Revised and improved SKILL.md documentation to reflect these enhancements.",
        "changelogSource": "user",
        "createdAt": 1770133962546,
        "version": "1.0.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "zhaov",
        "handle": "zhaov1976",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/26203336?v=4",
        "kind": "user",
        "linkedUserId": "kn7b7px97033b9mhvnbxhregfn804p4e"
    },
    "ownerHandle": "zhaov1976",
    "skill": {
        "_creationTime": 1769935394104,
        "_id": "kd74s5zfm27xmcw4zgm320z4k180b95x",
        "badges": [],
        "createdAt": 1769935394104,
        "displayName": "Voice",
        "latestVersionId": "k9726e0nwzp165zs6zw4sbrgg580er00",
        "ownerUserId": "kn7b7px97033b9mhvnbxhregfn804p4e",
        "slug": "voice",
        "stats": {
            "comments": 0,
            "downloads": 2019,
            "installsAllTime": 13,
            "installsCurrent": 13,
            "stars": 0,
            "versions": 2
        },
        "summary": "Convert text to speech using Microsoft Edge's TTS engine with customizable voices, direct playback, and automatic temporary file cleanup.",
        "tags": {
            "audio": "k978mmj3z9xttav44fs4gz85zs80btnv",
            "edge-tts": "k978mmj3z9xttav44fs4gz85zs80btnv",
            "latest": "k9726e0nwzp165zs6zw4sbrgg580er00",
            "latest edge-tts text-to-speech": "k9726e0nwzp165zs6zw4sbrgg580er00",
            "text-to-speech": "k978mmj3z9xttav44fs4gz85zs80btnv",
            "tts": "k978mmj3z9xttav44fs4gz85zs80btnv",
            "voice": "k978mmj3z9xttav44fs4gz85zs80btnv"
        },
        "updatedAt": 1774322022575
    }
}