deepgram-java-text-to-speech
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill correctly instructs developers to manage sensitive credentials using environment variables (
System.getenv("DEEPGRAM_API_KEY")) rather than hardcoding them in the source code. - [EXTERNAL_DOWNLOADS]: The skill references documentation and API specifications (OpenAPI, AsyncAPI) hosted on
developers.deepgram.com. These are legitimate resources provided by the vendor for SDK integration. - [COMMAND_EXECUTION]: A command is provided to add additional skills (
npx skills add deepgram/skills). This targets the vendor's own namespace and is part of the expected workflow for this ecosystem. - [SAFE]: Analysis found no evidence of obfuscated code, data exfiltration, privilege escalation, or persistence mechanisms. The skill's behavior matches its stated purpose.
Audit Metadata