Skip to main content

speak-core-workflow-a

Facilitates AI-driven conversation practice with real-time feedback, enhancing language learning through interactive tutoring sessions.

Install this skill

or
30/100

Security score

The speak-core-workflow-a skill was audited on Feb 21, 2026 and we found 14 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

medium line 100

Template literal with variable interpolation in command context

SourceSKILL.md
100console.log(`\nTutor: ${tutorPrompt.text}`);
medium line 102

Template literal with variable interpolation in command context

SourceSKILL.md
102console.log(`(${tutorPrompt.translation})`);
medium line 154

Template literal with variable interpolation in command context

SourceSKILL.md
154console.log(`Pronunciation: ${feedback.pronunciationScore}/100`);
medium line 159

Template literal with variable interpolation in command context

SourceSKILL.md
159console.log(` "${correction.original}" → "${correction.corrected}"`);
medium line 160

Template literal with variable interpolation in command context

SourceSKILL.md
160console.log(` Explanation: ${correction.explanation}`);
medium line 166

Template literal with variable interpolation in command context

SourceSKILL.md
166feedback.suggestions.forEach(s => console.log(` • ${s}`));
medium line 169

Template literal with variable interpolation in command context

SourceSKILL.md
169console.log(`\n${feedback.encouragement}`);
medium line 224

Template literal with variable interpolation in command context

SourceSKILL.md
224console.log(`Topic: ${config.topic}`);
medium line 225

Template literal with variable interpolation in command context

SourceSKILL.md
225console.log(`Language: ${config.targetLanguage}`);
medium line 238

Template literal with variable interpolation in command context

SourceSKILL.md
238console.log(`Duration: ${Math.round(summary.duration / 60000)} minutes`);
medium line 239

Template literal with variable interpolation in command context

SourceSKILL.md
239console.log(`Exchanges: ${summary.totalExchanges}`);
medium line 240

Template literal with variable interpolation in command context

SourceSKILL.md
240console.log(`Average Pronunciation: ${summary.averagePronunciationScore}/100`);
medium line 244

Template literal with variable interpolation in command context

SourceSKILL.md
244summary.achievements.forEach(a => console.log(` 🏆 ${a.name}`));
medium line 247

Template literal with variable interpolation in command context

SourceSKILL.md
247console.log(`\nSuggested next lesson: ${summary.nextLessonSuggestion}`);
Scanned on Feb 21, 2026
View Security Dashboard
Installation guide →