doubao-tts
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses environment variables (
DOUBAO_TTS_APPID,DOUBAO_TTS_TOKEN) to manage API credentials, which is the recommended security practice for agent skills. - [SAFE]: Network communication is restricted to the official Volcengine API domain (
openspeech.bytedance.com) using HTTPS. - [SAFE]: The Python script (
tts.py) implements standard parameter handling and follows the official API documentation for SSE (Server-Sent Events) streaming. - [SAFE]: File system operations are limited to writing the generated audio output to the specified user-provided path within the workspace.
Audit Metadata