Alicloud Ai Audio Cosyvoice Voice Design

This skill appears to do what it says (build CosyVoice enrollment requests) but there are a few concerns to address before using it: - The SKILL.md tells you to set DASHSCOPE_API_KEY or add dashscope credentials, but the registry metadata lists no required credentials — treat that as an omission, not a guarantee of safety. Provide a scoped, rotation-ready API key with minimal privileges. - Review the helper script before running. Its --validate-response option reads any local JSON file path you pass: do not point it at sensitive system files. If you run the skill under an agent, confirm the agent will not call the script with attacker-controlled file paths. - Verify the endpoints in SKILL.md (dashscope.aliyuncs.com and dashscope-intl.aliyuncs.com) match official Alibaba Cloud documentation for your region. - Because the skill writes 'evidence' containing your voice_prompt and preview_text to an output directory, avoid including secrets or sensitive PII in those fields. - Consider asking the publisher to update registry metadata to declare DASHSCOPE_API_KEY as a required credential and to document any data storage/retention expectations. If you cannot verify the publisher, run the script locally in an isolated environment and with a least-privilege API key.