handraw-volc-tts
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill implements best practices for credential management, using Windows DPAPI for encryption and 0600 file permissions on Unix-like systems. It includes explicit instructions and code logic to prevent sensitive keys from being logged or echoed in outputs.
- [COMMAND_EXECUTION]: Subprocess calls are used for local audio processing via
ffmpegand for running the skill's own CLI during testing. These operations are restricted to the local environment and functional needs. - [DYNAMIC_EXECUTION]: The skill uses dynamic imports and
sys.pathmodification to integrate with its local sibling project,handraw-video-producer. This is a standard pattern for its intended multi-skill workflow. - [EXTERNAL_DOWNLOADS]: Network traffic is directed only to the official ByteDance OpenSpeech API at
openspeech.bytedance.com. No downloads from untrusted or unverified third-party sources were detected.
Audit Metadata