ez-tts
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes
ffmpegusingsubprocess.runto convert audio output to OGG format. The execution uses a list of arguments, which is a secure implementation that avoids shell injection risks. - [DATA_EXPOSURE]: The script reads from
~/.envto load configuration such as the Hugging Face token. This is a standard method for managing local credentials and does not involve unauthorized access or exfiltration. - [EXTERNAL_DOWNLOADS]: The skill depends on the
pocket-ttslibrary, which fetches models from Hugging Face's official repositories. These are verified sources for machine learning models and are required for the skill to function.
Audit Metadata