byted-text-to-speech
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill does not contain any malicious patterns such as prompt injection, obfuscation, or persistence mechanisms.
- [EXTERNAL_DOWNLOADS]: The skill communicates with
openspeech.bytedance.comto synthesize speech. This is the official vendor-owned endpoint for the Doubao TTS service and is considered safe. - [CREDENTIALS_UNSAFE]: The skill requires the
MODEL_SPEECH_API_KEYenvironment variable. It correctly instructs users to manage this credential via the environment rather than hardcoding it. - [COMMAND_EXECUTION]: The skill executes a Python script to perform the synthesis. The script is well-structured and uses safe practices for file handling and network requests.
- [DATA_EXFILTRATION]: No evidence of unauthorized data transmission was found. The script only sends the requested text to the specified ByteDance API for synthesis.
Audit Metadata