skills/jal-co/skills/ux-sound/Gen Agent Trust Hub

ux-sound

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes instructions to use npx skills add to install the elevenlabs/skills dependency, which is a standard method for extending agent capabilities.
  • [COMMAND_EXECUTION]: The scripts/trim-to-transient.sh and scripts/transients.mjs files execute ffmpeg via shell commands to process audio files (onset detection, trimming, normalization). These are utility scripts intended for local sound processing.
  • [EXTERNAL_DOWNLOADS]: The skill references the ElevenLabs API for generating sound effects. It includes JavaScript and Python examples for interacting with the @elevenlabs/* and elevenlabs official SDKs.
  • [DYNAMIC_EXECUTION]: The JavaScript code snippet uses fs.createWriteStream to save generated audio to /tmp/candidate.mp3, and the Python snippet uses standard open(..., "wb") for the same purpose. This is consistent with the skill's stated purpose of sound generation and processing.
  • [SAFE]: The skill follows security best practices for credential management by explicitly instructing the user to set the ELEVENLABS_API_KEY in their environment and warning against hardcoding or echoing the secret.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 08:45 PM