byted-text-to-speech
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
scripts/text_to_speech.pyscript to process text input and coordinate with the remote API.\n- [EXTERNAL_DOWNLOADS]: Fetches synthesized audio data and interacts with API key management endpoints on Volcengine's official infrastructure (e.g., openspeech.bytedance.com).\n- [CREDENTIALS_UNSAFE]: Manages sensitive API keys (MODEL_SPEECH_API_KEY, ARK_SKILL_API_KEY) using environment variables and a local .env file. The implementation correctly applies restrictive 0o600 file permissions to protect the stored credentials.
Audit Metadata