tts-voiceover
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- Installation Instructions for External Tools: The skill scripts and documentation reference a common installation command for 'uv', a well-known Python package manager. These references are provided as helpful guidance for users to set up their environment and are not automatically executed by the skill itself.
- Input Sanitization for SSML Generation: The skill processes user-provided speaker notes from YAML files to generate Speech Synthesis Markup Language (SSML). It correctly applies XML escaping to these inputs before they are sent to the Azure Speech service, which helps ensure that input data is handled correctly and prevents unexpected SSML behavior.
- Azure Service Integration: The skill interacts with Azure Speech services using standard SDKs and authentication methods, such as environment variables for API keys or Microsoft Entra ID. This is consistent with the skill's stated purpose of providing text-to-speech capabilities.
- PowerPoint File Modification: The skill includes a script to embed generated audio into PowerPoint decks. This involves modifying the internal XML structure of the .pptx file, which is the standard method for such integrations and is performed locally on the user's machine.
Audit Metadata