mm-easy-voice
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill is a legitimate tool designed to interact with the MiniMax Voice API for text-to-speech synthesis and audio management.
- [COMMAND_EXECUTION]: The skill uses the
subprocessmodule to executeffmpegandffprobefor audio processing (merging, converting, and analyzing files). These calls use list-based arguments rather than shell strings, which is a recommended practice to prevent command injection. - [EXTERNAL_DOWNLOADS]: The skill communicates with the MiniMax API endpoints (
api.minimaxi.com) to upload data and download synthesized audio files. These network operations are intrinsic to the skill's primary functionality. - [CREDENTIALS_UNSAFE]: The skill requires a
MINIMAX_VOICE_API_KEYenvironment variable for authentication. It includes an environment check script (check_environment.py) that validates the key's format, helping to ensure the correct credentials are used.
Audit Metadata