skills/akillness/jeo-skills/rfxgen/Gen Agent Trust Hub

rfxgen

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell scripts (scripts/setup.sh, scripts/generate.sh) to manage the build and execution of the rfxgen binary. These scripts use set -euo pipefail for safety, implement argument validation, and check for the presence of dependencies like git and cmake before proceeding.
  • [EXTERNAL_DOWNLOADS]: The scripts/setup.sh script downloads source code from the official rFXGen repository on GitHub (https://github.com/raysan5/rfxgen.git). This is documented as the standard procedure for a source build and targets a well-known development repository.
  • [REMOTE_CODE_EXECUTION]: While the skill builds and executes software from source, it does so using standard development tools (CMake) from the official upstream repository. The execution is limited to the local environment for generating sound assets.
  • [PROMPT_INJECTION]: The instructions in SKILL.md are standard technical documentation for a development tool. There are no attempts to override agent behavior, bypass safety guidelines, or extract system prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 01:49 AM
Security Audit — agent-trust-hub — rfxgen