console-sound
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats were detected in the analyzed files. The skill performs audio format conversion through bitwise arithmetic and standard file system operations.
- [COMMAND_EXECUTION]: The skill uses a local Python script (
vag.py) for all operations. Analysis of the script confirms it only uses standard library modules (argparse, array, json, math, os, struct, sys) and does not invoke subprocesses or shell commands with untrusted input. - [DATA_EXFILTRATION]: There is no network-related code within the skill. All data processing is confined to reading from and writing to the local filesystem, specifically targeting standard audio directories like
console/audio/. - [REMOTE_CODE_EXECUTION]: The skill does not download, fetch, or execute any external or remote code. All logic is contained within the provided
vag.pyfile. - [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdfile does not utilize any dynamic shell execution syntax (such as!command) that would trigger at load time.
Audit Metadata