doubao-open-tts
Pass
Audited by Gen Agent Trust Hub on Feb 19, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_SAFE] (SAFE): The skill uses a
.env.example.txttemplate to guide users on setting up credentials. No hardcoded API keys or secrets were found in the scripts. The test script masks the AppID when printing to the console. - [DATA_EXPOSURE] (SAFE): File system access is limited to reading its own configuration and writing generated audio files (MP3) to the local directory. There is no evidence of accessing sensitive system paths.
- [COMMAND_EXECUTION] (SAFE): The script performs standard Python operations and does not use
os.system,subprocess, orevalto execute arbitrary shell commands. - [EXTERNAL_DOWNLOADS] (SAFE): The
requirements.txtspecifiesrequests, which is a standard library for HTTP communication. No untrusted or suspicious external scripts are downloaded or executed.
Audit Metadata