fish-audio-tts
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill correctly instructs users to store sensitive API keys in a
.envfile, which is a standard and safe practice for secret management. - [REMOTE_CODE_EXECUTION]: The documentation references external API endpoints (api.fish.audio) for legitimate service functionality without any signs of unauthorized remote code execution or suspicious downloads.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The documentation uses placeholders like
<playground voice model id>and generic variable names for authentication headers.
Audit Metadata