uydi-voice
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is implemented as a single, zero-dependency Node.js script using only built-in modules, which minimizes the supply chain attack surface.
- [SAFE]: Authentication is handled via standard OAuth 2.0 (PKCE or Device Code flows), ensuring that the skill never handles or stores the user's account password.
- [SAFE]: Local credentials (access tokens) are stored in the user's home directory with restricted filesystem permissions (mode 600), preventing other users on the system from accessing the tokens.
- [SAFE]: Network activity is restricted to the vendor's official domain (uydi.com) for API interactions and voice synthesis tasks.
- [SAFE]: File operations are transparent and limited to reading user-provided audio samples for cloning and writing generated audio files to the specified output paths.
Audit Metadata