mix-engineer

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill declares requirements for standard Python libraries noisereduce, scipy, numpy, and soundfile. These are well-known, legitimate packages for scientific and audio processing tasks.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool and a custom MCP toolset (bitwize-music-mcp) to perform specialized audio analysis and processing. This level of access is necessary and appropriate for its function as a mix engineer.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection through data ingestion.
  • Ingestion points: The skill processes external audio WAV files and loads configuration parameters from an optional mix-presets.yaml file located in the workspace.
  • Boundary markers: There are no explicit boundary markers or instructions to disregard embedded data within the configuration file specified in the documentation.
  • Capability inventory: The skill has access to file writing, shell execution via Bash, and specialized audio processing tools.
  • Sanitization: The instructions describe a deep-merge process for the YAML configuration but do not detail specific validation or sanitization routines for the ingested data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 03:13 AM