lyria
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill integrates with Google Gemini Lyria 3 using the official
google-genaiPython package. - [SAFE]: The code handles API credentials through standard environment variables (
GEMINI_API_KEY,GOOGLE_CLOUD_PROJECT). - [SAFE]: The script includes a feature to disable SSL certificate verification via the
--no-ssl-verifyflag orLYRIA_NO_SSL_VERIFYenvironment variable. While this globally modifies the process's SSL context and monkey-patches thehttpxlibrary to skip verification—introducing a risk of Man-In-The-Middle (MITM) attacks—it is implemented as an optional, documented feature for users in restrictive network environments (e.g., behind corporate proxies). - [SAFE]: File system operations are limited to creating an output directory and writing the generated audio files to paths specified by the user or configuration.
Audit Metadata