fish-audio-api
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_SAFE]: The skill explicitly instructs users not to hardcode API keys and provides examples of reading them from environment variables (e.g.,
FISH_API_KEY) in bash, Python, and Node.js. - [DATA_EXPOSURE]: All documented API endpoints and documentation links point to official
fish.audiodomains (api.fish.audio,docs.fish.audio,fish.audio), which is the legitimate infrastructure for the skill author. - [COMMAND_EXECUTION]: Provides standard
curltemplates for interacting with REST endpoints. These are informative and do not contain malicious payloads. - [REMOTE_CODE_EXECUTION]: Includes code snippets using well-known libraries like
httpx,websockets, andfetch. These examples are intended for the user's local implementation and do not involve the skill downloading or executing untrusted code at runtime.
Audit Metadata