media-sox

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a Python script (scripts/sox.py) to execute the sox command-line utility for audio processing tasks like conversion, trimming, and denoising. The execution uses subprocess.run with a list of arguments and no shell invocation, which effectively prevents shell injection vulnerabilities.
  • [PROMPT_INJECTION]: No evidence of prompt injection, jailbreak attempts, or instructions to bypass safety guidelines were found in the skill's markdown instructions or YAML metadata.
  • [EXTERNAL_DOWNLOADS]: The skill documentation includes standard installation instructions for the SoX utility using well-known package managers (Homebrew and apt-get). No unauthorized or suspicious remote code downloads were detected.
  • [DATA_EXFILTRATION]: There are no patterns indicating the collection or transmission of sensitive data. The skill operates locally on audio files provided by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 09:54 AM
Security Audit — agent-trust-hub — media-sox