Is franklu0819-lang/zhipu-tts safe?
Yes. franklu0819-lang/zhipu-tts is safe to install. Oathe's behavioral security audit gave the zhipu-tts skill by franklu0819-lang a trust score of 87/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/franklu0819-lang/zhipu-tts
Is franklu0819-lang/zhipu-tts safe to install?
This is a legitimate text-to-speech skill that converts Chinese text to audio using Zhipu AI's GLM-TTS service. The skill is well-documented and implements expected TTS functionality without malicious behavior.
What security issues were found in franklu0819-lang/zhipu-tts?
Category Scores
Findings (4)
MEDIUM External API data transmission -25 ▶
The skill sends user-provided text input to an external Chinese TTS service (open.bigmodel.cn). While this is legitimate TTS functionality, it represents data leaving the local environment.
LOW Shell script execution -15 ▶
The skill includes an executable bash script for TTS functionality. The script is well-formed and appears legitimate.
LOW Third-party API dependency -20 ▶
Users must obtain and provide API keys for Zhipu AI service, creating external service dependency and potential privacy implications.
INFO Monitoring system file access -10 ▶
Sensitive files were accessed during the monitoring setup phase, not by the skill itself.
Should I install franklu0819-lang/zhipu-tts?
Oathe's verdict for franklu0819-lang/zhipu-tts is SAFE with a trust score of 87/100. Recommendation: Install with caution.