chanjing-tts

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The _auth.py script invokes a local helper script from a related vendor skill (chanjing-credentials-guard) using subprocess.run. This is used to trigger a login page in the user's browser when API credentials are not found. The execution uses a hardcoded path relative to the skill and utilizes sys.executable rather than a shell, which is a secure implementation pattern.
  • [SAFE]: The skill interacts exclusively with official vendor domains (open-api.chanjing.cc) for authentication and task management. Sensitive data like the app_id and secret_key are managed via a dedicated local configuration file (~/.chanjing/credentials.json) which is standard practice for this vendor's ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 07:35 AM