Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward SenseAudio text-to-speech API guide that sends user-provided text to the disclosed provider endpoint and saves returned audio in examples.
Install only if you intend to use SenseAudio's hosted TTS service. Treat the text you submit as data sent to that provider, protect SENSEAUDIO_API_KEY like a secret, and change the sample output filenames if you do not want response.json or output.mp3 overwritten.
The description states support for Chinese and English, and the document is then duplicated in English and Chinese, but it does not explicitly offer a user language or locale choice. The policy requires avoiding forced language/locale behavior unless the skill offers opt-in or clearly documents a justified locale constraint.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
SenseAudio TTS converts text to natural, emotionally rich speech using a large language model. Supports 10+ emotions, streaming output (SSE), and fine-grained voice control.
**Endpoint:** `POST https://api.senseaudio.cn/v1/t2a_v2`
**Auth:** `Authorization: Bearer $SENSEAUDIO_API_KEY`
**Max text length:** 10,000 characters
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
SenseAudio TTS converts text to natural, emotionally rich speech using a large language model. Supports 10+ emotions, streaming output (SSE), and fine-grained voice control.
**Endpoint:** `POST https://api.senseaudio.cn/v1/t2a_v2`
**Auth:** `Authorization: Bearer $SENSEAUDIO_API_KEY`
**Max text length:** 10,000 characters
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
SenseAudio TTS converts text to natural, emotionally rich speech using a large language model. Supports 10+ emotions, streaming output (SSE), and fine-grained voice control.
**Endpoint:** `POST https://api.senseaudio.cn/v1/t2a_v2`
**Auth:** `Authorization: Bearer $SENSEAUDIO_API_KEY`
**Max text length:** 10,000 characters
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
SenseAudio TTS converts text to natural, emotionally rich speech using a large language model. Supports 10+ emotions, streaming output (SSE), and fine-grained voice control.
**Endpoint:** `POST https://api.senseaudio.cn/v1/t2a_v2`
**Auth:** `Authorization: Bearer $SENSEAUDIO_API_KEY`
**Max text length:** 10,000 characters
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
SenseAudio TTS converts text to natural, emotionally rich speech using a large language model. Supports 10+ emotions, streaming output (SSE), and fine-grained voice control.
**Endpoint:** `POST https://api.senseaudio.cn/v1/t2a_v2`
**Auth:** `Authorization: Bearer $SENSEAUDIO_API_KEY`
**Max text length:** 10,000 characters
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
SenseAudio TTS converts text to natural, emotionally rich speech using a large language model. Supports 10+ emotions, streaming output (SSE), and fine-grained voice control.
**Endpoint:** `POST https://api.senseaudio.cn/v1/t2a_v2`
**Auth:** `Authorization: Bearer $SENSEAUDIO_API_KEY`
**Max text length:** 10,000 characters
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
SenseAudio TTS converts text to natural, emotionally rich speech using a large language model. Supports 10+ emotions, streaming output (SSE), and fine-grained voice control.
**Endpoint:** `POST https://api.senseaudio.cn/v1/t2a_v2`
**Auth:** `Authorization: Bearer $SENSEAUDIO_API_KEY`
**Max text length:** 10,000 characters
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -X POST https://api.senseaudio.cn/v1/t2a_v2 \
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
resp = requests.post(
"https://api.senseaudio.cn/v1/t2a_v2",
headers={"Authorization": "Bearer YOUR_API_KEY", "Content-Type": "application/json"},
json={
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
resp = requests.post(
"https://api.senseaudio.cn/v1/t2a_v2",
headers={"Authorization": "Bearer YOUR_API_KEY", "Content-Type": "application/json"},
json={
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
resp = requests.post(
"https://api.senseaudio.cn/v1/t2a_v2",
headers={"Authorization": "Bearer YOUR_API_KEY", "Content-Type": "application/json"},
json={
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
resp = requests.post(
"https://api.senseaudio.cn/v1/t2a_v2",
headers={"Authorization": "Bearer YOUR_API_KEY", "Content-Type": "application/json"},
json={
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
resp = requests.post(
"https://api.senseaudio.cn/v1/t2a_v2",
headers={"Authorization": "Bearer YOUR_API_KEY", "Content-Type": "application/json"},
json={
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import requests
resp = requests.post(
"https://api.senseaudio.cn/v1/t2a_v2",
headers={"Authorization": "Bearer YOUR_API_KEY", "Content-Type": "application/json"},
json={
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -X POST https://api.senseaudio.cn/v1/t2a_v2 \
-H "Authorization: Bearer $SENSEAUDIO_API_KEY" \
-H "Content-Type: application/json" \
-d '{
The curl example saves API output to response.json and then writes decoded audio to output.mp3, but the surrounding documentation does not warn that running the commands will create or overwrite local files. Under the markdown-file criteria, file-affecting behavior should be disclosed when it may impact user data or system state.
Both Python examples write synthesized audio to output.mp3, and the documentation does not alert the user that executing them will create or overwrite that file. For markdown documentation, user-facing warnings should mention behaviors that modify local data or files.