doubao-tts

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the requests library, which is a standard and reputable Python package for HTTP communication.
  • [COMMAND_EXECUTION]: The skill executes a local Python script (scripts/tts.py) that handles text-to-speech requests. The script uses standard argument parsing and does not perform any dangerous shell operations or command injections.
  • [DATA_EXFILTRATION]: Authentication tokens and text data are transmitted to openspeech.bytedance.com. This is the official API endpoint for ByteDance's TTS service and is consistent with the skill's primary function.
  • [CREDENTIALS_UNSAFE]: The skill utilizes environment variables (DOUBAO_APPID, DOUBAO_TOKEN) for authentication, which is a secure and recommended practice for managing sensitive secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 08:36 AM