aliyun-cosyvoice-voice-design
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a set of instructions and a utility script to interact with official Alibaba Cloud voice synthesis APIs. All referenced endpoints belong to legitimate Alibaba Cloud domains.
- [COMMAND_EXECUTION]: A validation block in the documentation uses
py_compileto check the syntax of local scripts. This is a standard and safe diagnostic procedure. - [DATA_EXPOSURE]: The skill correctly instructs users to manage their Alibaba Cloud API keys via standard environment variables or configuration files. It does not contain hardcoded credentials or malicious code that attempts to exfiltrate these files.
- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-supplied text for voice design descriptions. It safely processes this data using standard JSON serialization libraries to prepare API requests, which is the primary intended function of the tool.
Audit Metadata