doubao-open-tts

Pass

Audited by Gen Agent Trust Hub on Feb 19, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_SAFE] (SAFE): The skill uses a .env.example.txt template to guide users on setting up credentials. No hardcoded API keys or secrets were found in the scripts. The test script masks the AppID when printing to the console.
  • [DATA_EXPOSURE] (SAFE): File system access is limited to reading its own configuration and writing generated audio files (MP3) to the local directory. There is no evidence of accessing sensitive system paths.
  • [COMMAND_EXECUTION] (SAFE): The script performs standard Python operations and does not use os.system, subprocess, or eval to execute arbitrary shell commands.
  • [EXTERNAL_DOWNLOADS] (SAFE): The requirements.txt specifies requests, which is a standard library for HTTP communication. No untrusted or suspicious external scripts are downloaded or executed.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 19, 2026, 03:56 PM