rfxgen
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts (
scripts/setup.sh,scripts/generate.sh) to manage the build and execution of therfxgenbinary. These scripts useset -euo pipefailfor safety, implement argument validation, and check for the presence of dependencies likegitandcmakebefore proceeding. - [EXTERNAL_DOWNLOADS]: The
scripts/setup.shscript downloads source code from the officialrFXGenrepository on GitHub (https://github.com/raysan5/rfxgen.git). This is documented as the standard procedure for a source build and targets a well-known development repository. - [REMOTE_CODE_EXECUTION]: While the skill builds and executes software from source, it does so using standard development tools (CMake) from the official upstream repository. The execution is limited to the local environment for generating sound assets.
- [PROMPT_INJECTION]: The instructions in
SKILL.mdare standard technical documentation for a development tool. There are no attempts to override agent behavior, bypass safety guidelines, or extract system prompts.
Audit Metadata