audio-production
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external scripts from the associated
ffmpeg-skillpackage usingsubprocess.Popeninsrc/audio_production/adapter.py. This execution is performed securely by explicitly disabling shell mode, using a minimal environment, and strictly validating all command-line arguments to ensure they consist only of resolved absolute paths or formatted numeric values. - [SAFE]: Robust file system security is enforced through a
PathPolicyinsrc/audio_production/security.py. This policy validates all input and output paths, resolves symlinks before checks, and ensures all file operations are confined within a designated workspace or allowed input roots, effectively preventing directory traversal. - [DATA_EXFILTRATION]: No network operations or data exfiltration patterns were identified in the codebase. The skill operates exclusively on local files for audio production tasks and maintains a strict boundary against external network access.
Audit Metadata