audio-wasapi
Fail
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The winaudio.py script is vulnerable to command injection. It uses Python f-strings to build PowerShell command strings which are then executed via subprocess.run. Because device names provided by the user are not escaped or sanitized before being placed inside single quotes in the PowerShell script, a crafted input (e.g., including "; [malicious command]; #") would result in arbitrary PowerShell execution.
- [EXTERNAL_DOWNLOADS]: The skill relies on and encourages the installation of several external, third-party software components. This includes the AudioDeviceCmdlets PowerShell module, NirSoft's svcl.exe (SoundVolumeView), and VB-Audio tools (VB-Cable, VoiceMeeter). These components are sourced from third-party repositories and were not identified as coming from trusted vendors.
- [PROMPT_INJECTION]: Due to the command injection flaw in winaudio.py, the skill is susceptible to indirect prompt injection. If an agent uses this skill to process audio device information derived from an untrusted source, an attacker could trigger the command execution vulnerability via a crafted device name.
Recommendations
- AI detected serious security threats
Audit Metadata