xfei-video-translate

Pass

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill communicates only with official iFlytek (Xfei) API endpoints (xfyun.com, xf-yun.com) to provide video translation and task management services.
  • [SAFE]: Credential management follows security best practices by utilizing environment variables (XFYUN_API_KEY, XFYUN_API_SECRET) instead of hardcoding sensitive secrets.
  • [SAFE]: The Python implementation uses standard, transparent authentication mechanisms (HMAC-SHA256 and Base64 encoding for headers) consistent with the vendor's official API documentation.
  • [SAFE]: No obfuscation, unauthorized network operations, or remote code execution patterns were detected within the script or documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 15, 2026, 05:56 AM
Security Audit — agent-trust-hub — xfei-video-translate