tts-skill
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinassets/minimax_tts.pyto call system audio players such asafplay,aplay,paplay,mpv, orffplay. These calls are implemented using list arguments withoutshell=True, which is a secure way to execute external commands for audio playback. - [EXTERNAL_DOWNLOADS]: The skill interacts with the MiniMax API at
api.minimax.io. This network communication is essential for the text-to-speech, voice cloning, and voice design features. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by requiring the
MINIMAX_API_KEYto be provided via environment variables rather than being hardcoded in scripts or documentation.
Audit Metadata