Skip to main content

speak-core-workflow-a

Facilitates AI-driven conversation practice with real-time feedback for language learners, enhancing pronunciation and fluency.

Install this skill

or
74/100

Security score

The speak-core-workflow-a skill was audited on May 12, 2026 and we found 10 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 105

Template literal with variable interpolation in command context

SourceSKILL.md
105console.log(`\nTutor: ${prompt}`);
medium line 116

Template literal with variable interpolation in command context

SourceSKILL.md
116console.log(`Pronunciation needs work: ${turn.pronunciationScore}/100`);
medium line 139

Template literal with variable interpolation in command context

SourceSKILL.md
139console.log(`\n=== ${topic.toUpperCase()} ===`);
medium line 142

Template literal with variable interpolation in command context

SourceSKILL.md
142console.log(`Score: ${summary.avgPronunciationScore}/100`);
low line 43

Access to .env file

SourceSKILL.md
43apiKey: process.env.SPEAK_API_KEY!,
low line 44

Access to .env file

SourceSKILL.md
44appId: process.env.SPEAK_APP_ID!,
low line 181

External URL reference

SourceSKILL.md
181- [Speak Website](https://speak.com)
low line 182

External URL reference

SourceSKILL.md
182- [Speak GPT-4 Blog](https://speak.com/blog/speak-gpt-4)
low line 183

External URL reference

SourceSKILL.md
183- [OpenAI Realtime API](https://platform.openai.com/docs/guides/realtime)
low line 184

External URL reference

SourceSKILL.md
184- [Live Roleplays](https://speak.com/blog/live-roleplays)
Scanned on May 12, 2026
View Security Dashboard
Installation guide →