audio-production

Pass

Audited by Gen Agent Trust Hub on Oct 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes external scripts from the associated ffmpeg-skill package using subprocess.Popen in src/audio_production/adapter.py. This execution is performed securely by explicitly disabling shell mode, using a minimal environment, and strictly validating all command-line arguments to ensure they consist only of resolved absolute paths or formatted numeric values.
  • [SAFE]: Robust file system security is enforced through a PathPolicy in src/audio_production/security.py. This policy validates all input and output paths, resolves symlinks before checks, and ensures all file operations are confined within a designated workspace or allowed input roots, effectively preventing directory traversal.
  • [DATA_EXFILTRATION]: No network operations or data exfiltration patterns were identified in the codebase. The skill operates exclusively on local files for audio production tasks and maintains a strict boundary against external network access.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 30, 2026, 06:15 AM