promo-director

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Bash to verify the installation of ffmpeg and confirm that necessary filters (like showwaves and gblur) are available. This is a legitimate environment check for its core functionality.
  • [EXTERNAL_DOWNLOADS]: Includes clear instructions for the user to install ffmpeg using official package managers (brew for macOS or apt for Linux). These are standard installation paths for required system dependencies.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external media files (audio and artwork) and a local configuration file (~/.bitwize-music/config.yaml). While these are external data ingestion points, the risk is negligible as the data is processed by specialized non-LLM tools for visualization and parameter extraction, not as a source of reasoning or instructions for the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:12 PM