xai-tts
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate integration with the Pixazo API for voice synthesis and transcription.
- [SAFE]: API key handling follows security best practices, utilizing environment variables or local files with restricted permissions (chmod 600).
- [SAFE]: All communication occurs with the developer's verified domains (pixazo.ai).
- [EXTERNAL_DOWNLOADS]: The skill suggests fetching documentation from the official vendor website to provide context on API parameters.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text for synthesis, creating a standard ingestion surface.
- Ingestion points: User-provided text in request samples in SKILL.md.
- Boundary markers: None.
- Capability inventory: Network requests via curl, requests, and fetch to gateway.pixazo.ai.
- Sanitization: None.
Audit Metadata