promo-director
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Bash to verify the installation of
ffmpegand confirm that necessary filters (likeshowwavesandgblur) are available. This is a legitimate environment check for its core functionality. - [EXTERNAL_DOWNLOADS]: Includes clear instructions for the user to install
ffmpegusing official package managers (brewfor macOS oraptfor Linux). These are standard installation paths for required system dependencies. - [INDIRECT_PROMPT_INJECTION]: The skill processes external media files (audio and artwork) and a local configuration file (
~/.bitwize-music/config.yaml). While these are external data ingestion points, the risk is negligible as the data is processed by specialized non-LLM tools for visualization and parameter extraction, not as a source of reasoning or instructions for the agent.
Audit Metadata