byted-text-to-speech
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages sensitive credentials using the
MODEL_SPEECH_API_KEYenvironment variable, which is a secure practice for handling API keys compared to hardcoding. - [SAFE]: Network communication is exclusively directed to
openspeech.bytedance.com. This domain belongs to the official service provider (Bytedance/Volcengine) and is consistent with the skill's stated purpose. - [SAFE]: The skill does not employ any obfuscation techniques. The use of Base64 decoding in
scripts/text_to_speech.pyis strictly for processing legitimate binary audio data returned by the API. - [SAFE]: Dependencies are limited to
httpx, a well-known and reputable HTTP client library. No suspicious or unverified third-party packages are requested. - [SAFE]: File system operations are restricted to saving the generated audio output to a user-specified or automatically generated local path, without attempting to access sensitive system directories or configuration files.
Audit Metadata