stepfun-tts

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements standard API clients to interact with StepFun's official endpoints (api.stepfun.com).
  • [SAFE]: Secret management is handled via environment variables or specific configuration files within the agent's data directory, following recommended practices for avoiding hardcoded credentials.
  • [SAFE]: All bundled scripts perform their documented functions—synthesis, transcription, and file comparison—without suspicious side effects, privilege escalation, or persistence attempts.
  • [SAFE]: Data processing involves standard encoding (JSON, Base64) and utilizes system tools like ffprobe and stat in a controlled manner for media analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 01:57 AM