audio-coreaudio
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/macaudio.pyexecutes several local macOS binaries, includingafinfo,afplay,afconvert,say, andosascript, to manipulate audio settings and files. - [COMMAND_EXECUTION]: The
aggregate-createcommand generates an AppleScript snippet by interpolating user-provided device names and UIDs into a string which is then executed viaosascript. While the interpolated data is currently placed within AppleScript comments, this implementation creates a potential injection surface if the inputs contain control characters or line breaks designed to break out of the comment blocks. - [EXTERNAL_DOWNLOADS]: The documentation and script output reference well-known third-party utilities such as
SwitchAudioSourceandBlackHole, providing Homebrew (brew install) commands for the user. These installation steps are not automated by the skill and require manual user execution.
Audit Metadata