media-tts-ai
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The helper script
scripts/tts.pyinvokes external binaries likeffmpegandpiperto perform audio processing and synthesis. These calls are constructed using lists of arguments rather than shell strings, which effectively prevents command injection vulnerabilities. These operations are necessary and intended for the skill's functionality. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of various AI libraries via official package registries (PyPI). The models and libraries referenced (such as Kokoro-ONNX, Parler-TTS, and Bark) are prominent open-source projects hosted by reputable organizations like HuggingFace and Alibaba. No unverified or suspicious remote code execution patterns were found.
- [DATA_EXFILTRATION]: No patterns indicative of data exfiltration were detected. The skill operates locally on user-provided text or audio references and outputs files to the local file system. There is no evidence of unauthorized network transmission or harvesting of sensitive environment data.
Audit Metadata