audiocraft-audio-generation

Warn

Audited by Gen Agent Trust Hub on Jun 29, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the AudioCraft library and pre-trained model weights from the official Facebook Research GitHub repository and Hugging Face organization.
  • [COMMAND_EXECUTION]: Provides instructions for installing dependencies using pip, cloning repositories with git, and installing system-level utilities like ffmpeg using sudo apt-get install.
  • [REMOTE_CODE_EXECUTION]: The Gradio demo implementation in SKILL.md and references/advanced-usage.md uses the share=True parameter, which generates a public URL through Gradio's relay service, exposing the local audio generation interface to the internet.
  • [REMOTE_CODE_EXECUTION]: The skill includes boilerplate code for a FastAPI web server and a LangChain tool designed to execute local functions based on text prompts. These components lack authentication or input sanitization, which could be exploited if exposed to untrusted users.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 29, 2026, 12:55 AM
Security Audit — agent-trust-hub — audiocraft-audio-generation