console-sound

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security threats were detected in the analyzed files. The skill performs audio format conversion through bitwise arithmetic and standard file system operations.
  • [COMMAND_EXECUTION]: The skill uses a local Python script (vag.py) for all operations. Analysis of the script confirms it only uses standard library modules (argparse, array, json, math, os, struct, sys) and does not invoke subprocesses or shell commands with untrusted input.
  • [DATA_EXFILTRATION]: There is no network-related code within the skill. All data processing is confined to reading from and writing to the local filesystem, specifically targeting standard audio directories like console/audio/.
  • [REMOTE_CODE_EXECUTION]: The skill does not download, fetch, or execute any external or remote code. All logic is contained within the provided vag.py file.
  • [DYNAMIC_CONTEXT_INJECTION]: The SKILL.md file does not utilize any dynamic shell execution syntax (such as !command) that would trigger at load time.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 09:36 PM