ux-sound
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions to use
npx skills addto install theelevenlabs/skillsdependency, which is a standard method for extending agent capabilities. - [COMMAND_EXECUTION]: The
scripts/trim-to-transient.shandscripts/transients.mjsfiles executeffmpegvia shell commands to process audio files (onset detection, trimming, normalization). These are utility scripts intended for local sound processing. - [EXTERNAL_DOWNLOADS]: The skill references the ElevenLabs API for generating sound effects. It includes JavaScript and Python examples for interacting with the
@elevenlabs/*andelevenlabsofficial SDKs. - [DYNAMIC_EXECUTION]: The JavaScript code snippet uses
fs.createWriteStreamto save generated audio to/tmp/candidate.mp3, and the Python snippet uses standardopen(..., "wb")for the same purpose. This is consistent with the skill's stated purpose of sound generation and processing. - [SAFE]: The skill follows security best practices for credential management by explicitly instructing the user to set the
ELEVENLABS_API_KEYin their environment and warning against hardcoding or echoing the secret.
Audit Metadata