media-sox
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script (
scripts/sox.py) to execute thesoxcommand-line utility for audio processing tasks like conversion, trimming, and denoising. The execution usessubprocess.runwith a list of arguments and no shell invocation, which effectively prevents shell injection vulnerabilities. - [PROMPT_INJECTION]: No evidence of prompt injection, jailbreak attempts, or instructions to bypass safety guidelines were found in the skill's markdown instructions or YAML metadata.
- [EXTERNAL_DOWNLOADS]: The skill documentation includes standard installation instructions for the SoX utility using well-known package managers (Homebrew and apt-get). No unauthorized or suspicious remote code downloads were detected.
- [DATA_EXFILTRATION]: There are no patterns indicating the collection or transmission of sensitive data. The skill operates locally on audio files provided by the user.
Audit Metadata