songsee
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
go installcommand to fetch thesongseetool from the repositorygithub.com/steipete/songsee. This is a standard method for distributing Go-based utilities. - [COMMAND_EXECUTION]: The instructions involve executing the
songseebinary with various flags to generate spectrograms and audio features. This uses the command-line interface as intended. - [INDIRECT_PROMPT_INJECTION]: The skill ingests audio files (untrusted data) to produce visual representations.
- Ingestion points: Audio files processed by the
songseecommand as seen in the examples inSKILL.md. - Boundary markers: None present in the instructions.
- Capability inventory: The skill uses a CLI subprocess to transform audio data into image files.
- Sanitization: The skill relies on the binary's native handling of audio formats like MP3 and WAV.
Audit Metadata