insert-silence-beat
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script uses
subprocess.runwith list-based arguments forffmpegandffprobecalls. This is the recommended security practice to prevent shell injection, as it bypasses the shell and treats arguments as literal strings. - [DATA_EXPOSURE]: The skill uses a manifest file (
manifest.json) to track operations. It logs local file paths and status, which is standard for build/processing tools and does not constitute unauthorized data exposure. - [REMOTE_CODE_EXECUTION]: All code is executed locally. The skill depends on
ffmpegandffprobebeing pre-installed on the system, but does not attempt to download or execute external code at runtime. - [PROMPT_INJECTION]: The instructions are clearly scoped to audio editing tasks. There are no patterns suggesting attempts to override agent behavior or bypass safety filters.
Audit Metadata