procedural-composer
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements procedural audio synthesis using mathematical functions and standard Go file I/O. No malicious patterns, obfuscation, or exfiltration vectors were identified.
- [EXTERNAL_DOWNLOADS]: The project depends on the Ebitengine game engine and its associated libraries (github.com/hajimehoshi/ebiten/v2, github.com/ebitengine/oto/v3, github.com/ebitengine/purego) for audio playback. These are well-known and widely used open-source projects in the Go ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted JSON audio definitions. Ingestion points: LoadAudioDefJSON in scripts/sound.go. Boundary markers: Structured JSON fields. Capability inventory: Local file read/write for definitions and WAV export, and audio context playback. Sanitization: Input parameters are parsed into typed structs and clamped within the DSP synthesis logic (e.g., amplitude clamping in GenerateNotePCM).
Audit Metadata