skills/jal-co/skills/ux-sound/Gen Agent Trust Hub

ux-sound

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides detailed design principles and implementation rules for UX/UI sound, including a decision tree to minimize unnecessary audio.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the elevenlabs/skills package via npx skills add, which is a standard method for extending agent capabilities.
  • [COMMAND_EXECUTION]: Shell scripts (scripts/transients.mjs and scripts/trim-to-transient.sh) are provided to process audio files using ffmpeg. These scripts perform legitimate audio analysis (onset detection) and processing (trimming, fading, limiting).
  • [CREDENTIALS_UNSAFE]: The skill explicitly instructs the user not to hardcode API keys. It follows security best practices by recommending the use of environment variables (ELEVENLABS_API_KEY) and providing a shell check to verify the key's presence without exposing it.
  • [REMOTE_CODE_EXECUTION]: While the skill includes code snippets for Python and Node.js that interact with the ElevenLabs API, these are standard SDK usages for the skill's primary purpose. The scripts use localized temporary paths (/tmp/candidate.mp3) for file operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 11:38 AM
Security Audit — agent-trust-hub — ux-sound