xtts
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill manages the Pixazo API key by storing it in '~/.pixazo/api-key' with restricted file permissions (chmod 600). This is a standard practice for persistent credential management within the vendor's ecosystem.
- [EXTERNAL_DOWNLOADS]: The agent is instructed to fetch documentation from 'https://www.pixazo.ai/models/xtts.md' at runtime to obtain precise parameter schemas and API specifications.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an ingestion point for external data by fetching instructions from the vendor's website ('pixazo.ai') to guide its execution logic.
- [COMMAND_EXECUTION]: The skill provides instructions for the user to install additional vendor tools using 'npx', referencing the official 'Pixazo-AI/skills' repository.
Audit Metadata