doubao-tts
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
requestslibrary, which is a standard and reputable Python package for HTTP communication. - [COMMAND_EXECUTION]: The skill executes a local Python script (
scripts/tts.py) that handles text-to-speech requests. The script uses standard argument parsing and does not perform any dangerous shell operations or command injections. - [DATA_EXFILTRATION]: Authentication tokens and text data are transmitted to
openspeech.bytedance.com. This is the official API endpoint for ByteDance's TTS service and is consistent with the skill's primary function. - [CREDENTIALS_UNSAFE]: The skill utilizes environment variables (
DOUBAO_APPID,DOUBAO_TOKEN) for authentication, which is a secure and recommended practice for managing sensitive secrets.
Audit Metadata