Scan Report
0 /100
mimo-tts
Generate speech audio (WAV) from text using Xiaomi MiMo TTS (mimo-v2-tts model)
MiMo TTS skill is a straightforward text-to-speech wrapper using only Python standard library, making a single authenticated API call to Xiaomi's service and writing audio output — no suspicious patterns.
Safe to install
No action needed. The skill is safe to use as described.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Network | READ | READ | ✓ Aligned | scripts/tts.py:27 urllib.request.urlopen POST to api.xiaomimimo.com |
| Filesystem | NONE | WRITE | ✓ Aligned | scripts/tts.py:93 open(args.output, 'wb') — declared in docs as -o output flag |
| Environment | READ | READ | ✓ Aligned | scripts/tts.py:85 os.environ.get('MIMO_API_KEY') — declared in SKILL.md |
| Shell | NONE | NONE | — | No shell execution found |
2 findings
Medium External URL 外部 URL
https://api.xiaomimimo.com SKILL.md:13 Medium External URL 外部 URL
https://api.xiaomimimo.com/v1 scripts/tts.py:12 File Tree
2 files · 5.5 KB · 167 lines Python 1f · 96L
Markdown 1f · 71L
├─
▾
scripts
│ └─
tts.py
Python
└─
SKILL.md
Markdown
Security Positives
✓ Uses only Python standard library (no third-party dependencies)
✓ API key read from environment variable only, not hardcoded
✓ No subprocess, eval, or shell command execution
✓ No access to sensitive paths (~/.ssh, ~/.aws, .env files)
✓ No base64 decode piped to shell
✓ No data exfiltration or credential harvesting beyond the intended API call
✓ Implementation matches documented behavior exactly