ifly-voiceclone-tts
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill transmits audio samples and text input to iFlytek's infrastructure (xfyousheng.com and xf-yun.com) for training custom voice models and generating speech. This is consistent with the skill's stated purpose.
- [COMMAND_EXECUTION]: The Python script reads local audio files for training and writes the resulting synthesized audio files to the local filesystem based on user-provided paths.
- [EXTERNAL_DOWNLOADS]: The tool supports an option to provide a remote URL for training audio, which is then processed by the iFlytek service.
- [SAFE]: The script uses insecure HTTP for some API calls and disables SSL certificate verification for WebSocket connections. These are documented as best-practice violations and do not constitute malicious behavior in the context of this vendor-specific utility.
Audit Metadata