media-demucs
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a Python script, 'scripts/stems.py', which acts as a wrapper for the 'demucs' and 'spleeter' command-line tools. The script employs the subprocess module to run these utilities, passing arguments as a list to safely avoid shell injection risks. This is the intended and necessary behavior for the skill's purpose.
- [EXTERNAL_DOWNLOADS]: The instructions provided in the skill direct the user to install legitimate audio processing dependencies from standard Python package registries. Furthermore, the skill accurately documents that the underlying tools will download necessary pre-trained model weights from official repositories managed by trusted organizations like Meta (Facebook Research) on platforms such as HuggingFace and Torch Hub.
Audit Metadata