스킬 tts-skill

📦

tts-skill

Name: tts-skill
Author: tabortao

콘텐츠 리비전 r1 치명적 ⚙️ 외부 명령어🌐 네트워크 접근🔑 환경 변수📁 파일 시스템 접근

Generar voz con varios motores TTS

Los equipos a menudo necesitan salida de voz de diferentes proveedores de voz y modelos locales. Esta skill ofrece a Claude, Codex y Claude Code un flujo de comandos único para clonación local, voces en línea y OpenAI TTS.

지원: Claude Codex Code(CC)

⚠️ 38 나쁨

Maintain this Skill? Claim it ⚠️ 38 나쁨

이 Skill을 자동으로 설치하지 마세요.

공식 정책에 따라 설치 작업 전에 운영자 검토가 필요합니다.

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "tts-skill" from https://skillstore.io/skills/tabortao-tts-skill.md and its manifest at https://skillstore.io/api/skills/tabortao-tts-skill/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/tabortao-tts-skill.md 서명된 manifest GET /api/skills/tabortao-tts-skill/manifest 서명된 lockfile GET /api/skills/tabortao-tts-skill/lockfile

테스트해 보기

"tts-skill" 사용 중입니다. Genera una línea de bienvenida con una voz china en línea.

예상 결과:

La skill selecciona el motor en línea de estilo Edge, envía el texto al endpoint configurado y guarda un archivo MP3 en la carpeta output.

"tts-skill" 사용 중입니다. Crea una muestra de voz clonada a partir de una voz de referencia local.

예상 결과:

La skill localiza el audio de referencia y la transcripción correspondientes, ejecuta el motor Qwen3 y escribe una salida WAV con detalles de temporización.

"tts-skill" 사용 중입니다. Enumera las voces que puedo usar antes de generar audio.

예상 결과:

La skill imprime nombres de voces locales desde assets y alias de voz en línea integrados para motores de estilo Edge y OpenAI.

보안 감사

치명적

v4 • 2026. 7. 7. 버전별 보고서 열기

The audit confirms real external command execution, outbound TTS API calls, filesystem writes, and API-key handling. The most serious issue is a critical Qwen3 generated-code injection path where user text is inserted into Python source and executed. No evidence found of prompt-injection instructions in the reviewed skill files.

스캔된 파일

2,706

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (2)

치명적

docs/INSTALL.zh-CN.md:96

Pipe to shell pattern

curl -Ls https://micro.mamba.pm/install.sh | sh

The command pipes a remote install script directly to sh. This is a classic unsafe installer pattern because network content executes without local review.

치명적

engines/qwen3-tts-cli.py:175-211 engines/qwen3-tts-cli.py:346-356

Generated Python Source Injection

Qwen3-TTS builds a temporary Python source file that inserts raw user text into executable code, then writes and runs that file. Malicious input text can execute arbitrary Python commands in the micromamba environment.

The source template concatenates raw text into a Python print statement, then writes temp_qwen3_generate.py and executes it. This is direct code generation from user-controlled input.

기능 검토 항목 (31)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

치명적

docs/INSTALL.zh-CN.md:96

Hardcoded URL

curl -Ls https://micro.mamba.pm/install.sh | sh

The URL is used in a curl pipe-to-shell install command. Remote script contents would execute immediately in the user environment.

치명적

engines/qwen3-tts-cli.py:144

Python subprocess.run

subprocess.run(['powershell', '-Command', ps_command], check=True)

The auto-installer executes a remote Micromamba PowerShell install command through powershell -Command. Remote installer code runs without verification.

치명적

engines/qwen3-tts-cli.py:356

Python subprocess.run

result = subprocess.run(cmd, env=env, cwd=str(engines_dir))

This executes a generated temporary Python script whose source includes user text. That creates an arbitrary Python code execution path.

치명적

engines/qwen3-tts-cli.py:144

PowerShell invocation

subprocess.run(['powershell', '-Command', ps_command], check=True)

The command runs PowerShell with Invoke-Expression on downloaded installer content. This is a high-risk remote code execution pattern.

치명적

engines/qwen3-tts-cli.py:143

Hardcoded URL

ps_command = "Invoke-Expression ((Invoke-WebRequest -Uri https://micro.mamba.pm/install.ps1 -UseBasi

The hardcoded URL is embedded in a PowerShell Invoke-Expression installer command. The installer content can execute in the user environment.

치명적

engines/qwen3-tts-cli.py:346

Python file write/append

with open(temp_script, 'w', encoding='utf-8') as f:

The code writes generated Python source to a temporary file before executing it. That source includes unsafely concatenated user text.

높음

docs/INSTALL.zh-CN.md:68

PowerShell invocation

```powershell

The surrounding install block instructs Windows users to run a remote Micromamba PowerShell installer with Invoke-Expression. Downloaded installer code runs without checksum or signature verification.

높음

docs/INSTALL.zh-CN.md:194

PowerShell invocation

- Windows: 使用PowerShell运行安装脚本

The troubleshooting text directs users to run a PowerShell install script. This is manual documentation, but it still normalizes remote installer execution.

높음

docs/INSTALL.zh-CN.md:73

Hardcoded URL

Invoke-Expression ((Invoke-WebRequest -Uri https://micro.mamba.pm/install.ps1 -UseBasicParsing).Cont

The URL is used in a PowerShell Invoke-Expression installer command in the same block. Users are instructed to fetch and execute internet code without verification.

높음

engines/openai-tts-cli.py:145

Python HTTP libraries

response = requests.post(

The code posts user text to the configured OpenAI-compatible speech endpoint. It also attaches an Authorization bearer token in the same request.

높음

engines/openai-tts-cli.py:71

Configuration library

self.api_key = openai_config.get('api_key', '')

This line reads api_key from the OpenAI configuration. It is a real credential-handling path, even though it is expected for this engine.

높음

engines/openai-tts-cli.py:71

Generic API/secret keys

self.api_key = openai_config.get('api_key', '')

The code reads api_key from the configuration into memory. This is a real credential-handling path for the OpenAI engine.

높음

engines/openai-tts-cli.py:148

Generic API/secret keys

'Authorization': f'Bearer {self.api_key}',

The API key is placed in an Authorization bearer header. If base_url is changed, the credential can be sent to a non-OpenAI endpoint.

높음

engines/qwen3-tts-cli.py:146

Python subprocess.run

subprocess.run(['curl', '-Ls', 'https://micro.mamba.pm/install.sh'],

The auto-install path invokes curl against a remote installer URL. The arguments are fixed, but automatic remote installer retrieval still creates supply-chain risk.

높음

engines/qwen3-tts-cli.py:151

Python subprocess.run

subprocess.run(['micromamba', 'create', '-n', 'qwen3-tts', 'python=3.12', '-y'], check=True)

The script creates a micromamba environment from inside the skill. This changes local environment state and executes external tooling.

높음

engines/qwen3-tts-cli.py:155

Python subprocess.run

subprocess.run(['micromamba', 'run', '-n', 'qwen3-tts', 'pip', 'install', '-U', 'qwen-tts'], check=T

The script installs qwen-tts at runtime through pip. Runtime package installation executes third-party package code and adds supply-chain risk.

높음

engines/qwen3-tts-cli.py:159

Python subprocess.run

subprocess.run(['micromamba', 'run', '-n', 'qwen3-tts', 'pip', 'install', '-U', 'modelscope'], check

The script installs modelscope at runtime through pip. Runtime package installation executes third-party package code and adds supply-chain risk.

높음

engines/qwen3-tts-cli.py:146

Hardcoded URL

subprocess.run(['curl', '-Ls', 'https://micro.mamba.pm/install.sh'],

The script fetches a remote Micromamba installer URL during automatic setup. The lack of checksum or signature verification is a real supply-chain risk.

높음

tts-skill.py:167

Python subprocess.run

result = subprocess.run(cmd, cwd=str(self.engines_dir),

The main entrypoint runs selected engine scripts as subprocesses and forwards user arguments. Engine selection is allowlisted, but the child engines perform network and file operations.

높음

tts-skill.py:189

Python subprocess.run

result = subprocess.run(cmd, cwd=str(self.engines_dir))

The install path invokes the Qwen engine installer as a subprocess. That installer can download tools and install packages into the local environment.

중간

docs/INSTALL.zh-CN.md:274

Hardcoded URL

api_url = https://backup-tts-api.com/v1/audio/speech

The documentation suggests a backup TTS API endpoint that could receive user text. The endpoint is not an official provider in the reviewed context.

중간

engines/edge-tts-cli.py:147

Python HTTP libraries

response = requests.post(

The code posts user-provided text and voice parameters to the configured Edge-style TTS endpoint. That is a real outbound data transfer.

중간

engines/edge-tts-cli.py:37

Hardcoded URL

'api_url': 'https://tts.wangwangit.com/v1/audio/speech',

The default endpoint points to an external TTS service. Text submitted to this engine leaves the local environment.

중간

engines/edge-tts-cli.py:174

Python file write/append

with open(output_path, 'wb') as f:

The engine writes the downloaded audio response to the requested output path. A user-supplied path can overwrite files allowed by process permissions.

중간

engines/edge-tts.config:3

Hardcoded URL

api_url = https://tts.wangwangit.com/v1/audio/speech

The config sets an external TTS API endpoint as the default. User text can be sent to that service when the engine runs.

중간

engines/openai-tts-cli.py:72

Hardcoded URL

base_url = openai_config.get('base_url', 'https://api.openai.com/v1')

The client builds its speech endpoint from a configurable base URL, defaulting to OpenAI. Generated text will be sent to that external service.

중간

engines/openai-tts-cli.py:165

Python file write/append

with open(output_path, 'wb') as f:

The engine writes the API response to the requested output path. A user-supplied path can overwrite files allowed by process permissions.

중간

engines/qwen3-tts-cli.py:350

Python environment access

env = os.environ.copy()

The generated child process receives a copy of the full parent environment. Any inherited secrets are exposed to imported packages and injected code.

중간

tts-skill.py:169

Python environment access

env={**os.environ, 'PYTHONIOENCODING': 'utf-8', 'PYTHONUTF8': '1'})

The main wrapper passes the full inherited environment to engine subprocesses. Secrets present in the environment become available to child code.

낮음

engines/openai-tts-cli.py:58

Hardcoded URL

'base_url': 'https://api.openai.com/v1',

The default configuration uses the OpenAI API base URL. This is expected for the engine, but it is a real external network dependency.

낮음

engines/openai-tts.config:11

Hardcoded URL

base_url = https://api.openai.com/v1

The default config points to the OpenAI API service. This is expected, but it confirms an external network dependency for the OpenAI engine.

위험 요인

⚙️ 외부 명령어 (38)

🌐 네트워크 접근 (20)

🔑 환경 변수 (27)

📁 파일 시스템 접근 (9)

engines/edge-tts-cli.py:174 engines/openai-tts-cli.py:165 engines/qwen3-tts-cli.py:63 engines/qwen3-tts-cli.py:346 engines/qwen3-tts-cli.py:361 engines/qwen3-tts.config:16 engines/qwen3-tts.config:34 engines/qwen3-tts.config:49 README.md:48

감지된 패턴

Pipe to shell pattern

감사자: codex 감사 이력 보기 →

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/tabortao-tts-skill/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/tabortao-tts-skill/security.svg)](https://skillstore.io/skills/tabortao-tts-skill?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/tabortao-tts-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tabortao-tts-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/tabortao-tts-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

tabortao. (2026). tts-skill security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tabortao-tts-skill/audits/4

BibTeX 인용

@techreport{tabortao-tabortao-tts-skill-2026,
  author = {tabortao},
  title = {tts-skill security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/tabortao-tts-skill/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "tts-skill security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "tabortao"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/tabortao-tts-skill/audits/4"
identifiers:
  - type: other
    value: "skillstore:tabortao-tts-skill:audit:4"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Prototipar audio de narración

Crea muestras rápidas de voz a partir de borradores usando voces en línea antes de grabar el audio final.

Generar voces locales de personajes

Usa recursos de referencia de Qwen3 para probar voces clonadas para diálogos de juegos o demostraciones.

Convertir texto de guion por lotes

Lee texto desde archivos y guarda salidas de voz con marca de tiempo para flujos de revisión.

이 프롬프트를 사용해 보세요

Crear un clip de voz simple

Usa tts-skill para generar un clip corto de voz a partir de esta oración con la voz xiaoxiao: Bienvenido al recorrido del producto.

Usar un archivo de texto

Usa tts-skill con el motor qwen3-tts. Lee input/text.txt, usa la voz Lei y guarda el audio en la carpeta output.

Comparar motores de voz

Genera el mismo párrafo corto con edge-tts y OpenAI TTS. Usa configuraciones de voz claras y describe los archivos de salida creados.

Preparar una ejecución TTS controlada

Revisa el motor TTS configurado, confirma los requisitos de red y credenciales, y luego genera voz a partir de mi guion aprobado con una ruta de salida explícita.

모범 사례

Usa rutas de salida explícitas dentro de un directorio de salida dedicado.
Revisa el texto antes de enviarlo a cualquier proveedor TTS en línea.
Guarda las claves de API reales fuera de repositorios compartidos y rótalas regularmente.

피하기

No ejecutes el motor Qwen3 con texto no confiable hasta que se corrija la ejecución de código generado.
No redirijas scripts de instalación remotos a una shell sin verificación independiente.
No incluyas guiones privados, secretos o datos regulados en solicitudes TTS en línea.

자주 묻는 질문

¿Qué motores admite esta skill?

Admite Qwen3-TTS para clonación local, un endpoint TTS en línea de estilo Edge y OpenAI TTS.

¿Funciona sin acceso a internet?

Solo la ruta local de Qwen3 puede funcionar sin conexión después de instalar las dependencias y los modelos.

¿Requiere una clave de API de OpenAI?

Solo el motor OpenAI TTS requiere una clave de API. Otros motores usan rutas locales o en línea separadas.

¿Puede clonar una voz personalizada?

Sí, Qwen3-TTS puede usar archivos de audio de referencia y transcripción correspondientes colocados en el directorio assets.

¿Es seguro publicarla como revisada?

No. La auditoría actual recomienda no publicarla hasta que se corrija el problema de ejecución de código generado.

¿Qué debería corregirse primero?

Reemplaza la ejecución de código fuente Python generado por llamadas directas a funciones o paso seguro de parámetros para el texto de entrada de Qwen3.