ace-studio-workflows

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions include steps to download and install several Python packages (basic-pitch, librosa, pretty_midi, and mido) from the standard PyPI registry. These are established tools for audio signal processing and MIDI manipulation.
  • [EXTERNAL_DOWNLOADS]: The skill references and provides links to Spotify's official GitHub repository for the basic-pitch transcription tool.
  • [COMMAND_EXECUTION]: The skill documentation provides shell commands for setting up a local processing environment. This includes creating a Python virtual environment, managing dependencies via pip, and running external CLI utilities such as basic-pitch, MuseScore (MuseScore4.exe), and pdftoppm for file verification and conversion tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:42 PM
Security Audit — agent-trust-hub — ace-studio-workflows