skills/linkupplatform/openclaw/sherpa-onnx-tts/Snyk

sherpa-onnx-tts

Warn

Audited by Snyk on Aug 1, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). Source: the skill’s required runtime wrapper bin/sherpa-onnx-tts ingests outsider-authored free text directly from process.argv (the user-provided CLI "text" argument) and passes it to the offline TTS binary at runtime via spawnSync(..., text).

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 1, 2026, 08:31 AM

Issues

1

Security Audit — snyk — sherpa-onnx-tts