doubao-tts
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with official Bytedance Volcengine endpoints at
openspeech.bytedance.comfor submitting and querying text-to-speech jobs. - [DATA_EXPOSURE_AND_EXFILTRATION]: Configuration instructions specify using the
DOUBAO_SPEECH_API_KEYenvironment variable. The skill includes explicit safety instructions for the agent to never log, print, or store this key in project artifacts. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data via the
textparameter for narration. - Ingestion points: User-provided
textparameter used inTTSSelectorandDoubaoTTStools withinSKILL.md. - Boundary markers: None explicitly defined in the prompt interpolation, but the skill mandates a human-in-the-loop approval workflow for audio samples.
- Capability inventory: The skill performs file writes to
output_pathand network requests toopenspeech.bytedance.com. - Sanitization: No specific sanitization or filtering of the input text is described in the instructions.
Audit Metadata