songsee

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the go install command to fetch the songsee tool from the repository github.com/steipete/songsee. This is a standard method for distributing Go-based utilities.
  • [COMMAND_EXECUTION]: The instructions involve executing the songsee binary with various flags to generate spectrograms and audio features. This uses the command-line interface as intended.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests audio files (untrusted data) to produce visual representations.
  • Ingestion points: Audio files processed by the songsee command as seen in the examples in SKILL.md.
  • Boundary markers: None present in the instructions.
  • Capability inventory: The skill uses a CLI subprocess to transform audio data into image files.
  • Sanitization: The skill relies on the binary's native handling of audio formats like MP3 and WAV.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 05:59 AM