mix-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill declares requirements for standard Python libraries
noisereduce,scipy,numpy, andsoundfile. These are well-known, legitimate packages for scientific and audio processing tasks. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool and a custom MCP toolset (bitwize-music-mcp) to perform specialized audio analysis and processing. This level of access is necessary and appropriate for its function as a mix engineer. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection through data ingestion.
- Ingestion points: The skill processes external audio WAV files and loads configuration parameters from an optional
mix-presets.yamlfile located in the workspace. - Boundary markers: There are no explicit boundary markers or instructions to disregard embedded data within the configuration file specified in the documentation.
- Capability inventory: The skill has access to file writing, shell execution via
Bash, and specialized audio processing tools. - Sanitization: The instructions describe a deep-merge process for the YAML configuration but do not detail specific validation or sanitization routines for the ingested data.
Audit Metadata