distrokid-prep

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute ffmpeg locally for audio analysis and conversion. These operations are performed on local files provided by the user and are consistent with the skill's stated purpose of prepping audio tracks.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided audio files and release slugs. This represents an ingestion point for untrusted data (filenames or metadata). While no specific boundary markers are defined in the instructions, the risk is typical for file-processing tasks and the agent is expected to handle shell arguments safely.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 09:13 PM
Security Audit — agent-trust-hub — distrokid-prep