twinmind-performance-tuning
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
fluent-ffmpegNode.js library to perform audio preprocessing tasks such as noise reduction and normalization. This involves executing theffmpegbinary with predefined filter parameters. - [INDIRECT_PROMPT_INJECTION]: The
TranscriptCacheimplementation fetches data from externalaudioUrllinks to calculate hashes for caching and to process transcriptions. This represents an ingestion point for remote data. Ingestion points:audioUrlparameter inhashAudioandtranscribeWithCachefunctions inreferences/implementation.md. Boundary markers: None. Capability inventory:fetch,curl, andffmpegexecution. Sanitization: The skill does not explicitly sanitize the source URL before fetching. - [SAFE]: The skill demonstrates safe handling of sensitive credentials by instructing the use of the
TWINMIND_API_KEYenvironment variable instead of hardcoding secrets.
Audit Metadata