audio-pipewire

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/pwctl.py wraps several standard PipeWire utilities, including pw-cli, pw-dump, pw-link, pw-cat, and pw-metadata. These commands are executed using subprocess.run() with list-based arguments, which effectively mitigates shell injection risks by avoiding the system shell for command parsing.
  • [SAFE]: The skill operates entirely within the local Linux audio subsystem. No network operations, data exfiltration patterns, or persistence mechanisms were detected. The use of Path objects and argparse ensures that file paths and parameters are handled according to standard development practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 09:53 AM
Security Audit — agent-trust-hub — audio-pipewire