doubao-tts
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a legitimate integration for the Volcengine Doubao Speech 2.0 service. No malicious behavior, obfuscation, or unauthorized operations were detected.
- [DATA_EXFILTRATION]: The skill interacts with well-known official ByteDance API endpoints (openspeech.bytedance.com). It correctly instructs users to manage API keys via environment variables (DOUBAO_SPEECH_API_KEY) and includes a dedicated safety section warning against the exposure of credentials in logs or artifacts.
- [PROMPT_INJECTION]: No patterns of prompt injection or instructions to bypass safety guidelines were found in the skill content or metadata.
- [REMOTE_CODE_EXECUTION]: The provided code snippets demonstrate the use of internal Python modules (tools.audio.tts_selector and tools.audio.doubao_tts) and do not involve untrusted remote code execution or external script downloads.
Audit Metadata