Skip to main content

speak-hello-world

Demonstrates a minimal working example for integrating the Speak API in language learning applications.

Install this skill

or
75/100

Security score

The speak-hello-world skill was audited on Feb 21, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 173

Template literal with variable interpolation in command context

SourceSKILL.md
173console.log(`Q: ${question.prompt}`);
medium line 174

Template literal with variable interpolation in command context

SourceSKILL.md
174console.log(`Options: ${question.options.join(', ')}`);
medium line 178

Template literal with variable interpolation in command context

SourceSKILL.md
178console.log(`Correct: ${answer.correct}`);
medium line 181

Template literal with variable interpolation in command context

SourceSKILL.md
181console.log(`Final Score: ${quiz.score}/${quiz.total}`);
low line 37

Access to .env file

SourceSKILL.md
37apiKey: process.env.SPEAK_API_KEY!,
low line 38

Access to .env file

SourceSKILL.md
38appId: process.env.SPEAK_APP_ID!,
low line 114

Access to .env file

SourceSKILL.md
114apiKey: process.env.SPEAK_API_KEY!,
low line 115

Access to .env file

SourceSKILL.md
115appId: process.env.SPEAK_APP_ID!,
low line 92

External URL reference

SourceSKILL.md
92Audio URL: https://speak.com/audio/abc123.mp3
Scanned on Feb 21, 2026
View Security Dashboard
Installation guide →