41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill does what it says (invoke Windows TTS from WSL) but the provided scripts insert untrusted text into a double‑quoted PowerShell string without sufficient escaping, allowing PowerShell interpo...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1771153181427,
        "_id": "k9745w0fcsc7p4at69aed19r6x817440",
        "changelog": "Fix say.sh to be standalone (remove dependency on deleted saycn.sh); keep voice\/rate\/volume support",
        "changelogSource": "user",
        "createdAt": 1771153181427,
        "version": "1.1.1"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "547895019",
        "handle": "547895019",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/7350824?v=4",
        "kind": "user",
        "linkedUserId": "kn73kd31knk35nyy3y4r8g33p580y0gt"
    },
    "ownerHandle": "547895019",
    "skill": {
        "_creationTime": 1771075767707,
        "_id": "kd7eqvkkk2q9nngf4g0f1ada11815jz0",
        "badges": [],
        "createdAt": 1771075767707,
        "displayName": "Windows TTS (WSL2)",
        "latestVersionId": "k9745w0fcsc7p4at69aed19r6x817440",
        "ownerUserId": "kn73kd31knk35nyy3y4r8g33p580y0gt",
        "slug": "windows-tts-wsl2",
        "stats": {
            "comments": 0,
            "downloads": 618,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 3
        },
        "summary": "在 Windows 11 上\"直接发声\"的 TTS（从 WSL2\/TUI 调用 powershell.exe + System.Speech）。适用于用户说\"说出来\/读出来\/语音播报\/用TTS\"，或反馈\"没声音\/tts 生成的 mp3 是空的\/播不出来\"，以及需要中文语音但 OpenClaw 内置 tts 不可用时。",
        "tags": {
            "latest": "k9745w0fcsc7p4at69aed19r6x817440"
        },
        "updatedAt": 1774324733393
    }
}