qwen3-tts-local

Fail

Audited by Snyk on Jul 27, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (high risk: 0.70). The skill claims "真正的本地" and "完全离线/零依赖" but later admits it uses Microsoft Edge's online TTS via a reverse-engineered API, a deceptive contradiction about how it operates that is outside the advertised behavior.

Issues (1)

E004
CRITICAL

Prompt injection detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 27, 2026, 01:20 AM
Issues
1
Security Audit — snyk — qwen3-tts-local