Skills
Navigate
skills/cinience/alicloud-skills/aliyun-cosyvoice-voice-clone/Gen Agent Trust Hub

aliyun-cosyvoice-voice-clone

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DATA_EXPOSURE]: The skill's documentation identifies the standard location for Alibaba Cloud credentials (~/.alibabacloud/credentials) and environment variables (DASHSCOPE_API_KEY) to guide the user in configuring authentication for the service.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with Alibaba Cloud's official API endpoints (dashscope.aliyuncs.com and dashscope-intl.aliyuncs.com) for voice customization and references official documentation from alibabacloud.com.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data and local file paths.
  • Ingestion points: The voice_sample_url parameter and the --validate-response argument in scripts/prepare_cosyvoice_clone_request.py.
  • Boundary markers: Absent.
  • Capability inventory: The helper script performs local file reads (Path.read_text) and writes (Path.write_text) in the skill's output directory.
  • Sanitization: Absent; the script parses JSON directly from paths provided as arguments.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 07:49 AM