skills/araa47/ez-voice/ez-tts/Gen Agent Trust Hub

ez-tts

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes ffmpeg using subprocess.run to convert audio output to OGG format. The execution uses a list of arguments, which is a secure implementation that avoids shell injection risks.
  • [DATA_EXPOSURE]: The script reads from ~/.env to load configuration such as the Hugging Face token. This is a standard method for managing local credentials and does not involve unauthorized access or exfiltration.
  • [EXTERNAL_DOWNLOADS]: The skill depends on the pocket-tts library, which fetches models from Hugging Face's official repositories. These are verified sources for machine learning models and are required for the skill to function.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 04:21 PM