azure-text-to-speech
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documentation correctly instructs the user to use environment variables (
AZURE_SPEECH_KEY,AZURE_SPEECH_REGION) for secret management, avoiding the risk of hardcoded credentials.\n- [EXTERNAL_DOWNLOADS]: All external references and API endpoints target official Microsoft Azure domains (microsoft.com,azure.microsoft.com). As these are well-known and trusted services, these network operations are considered safe.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external text input for speech synthesis, which is a potential ingestion surface. However, the documentation explicitly states that text is automatically XML-escaped before processing, mitigating common injection risks in SSML environments.
Audit Metadata