audio-static-debugging
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run a Python script that calculates statistics on PCM audio data. The script is self-contained and uses only standard libraries for mathematical operations on local data.
- [DATA_EXPOSURE]: The skill reads from a local file named resp.json to analyze audio samples. No access to sensitive system files, credentials, or environment variables was detected.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from resp.json. The ingestion point is identified as the Python json.load function. While boundary markers are absent, the script treats the input strictly as binary PCM samples for calculation rather than instructions. The capability to execute scripts is limited to the statistical analysis provided, and the data is not interpolated into agent prompts, neutralizing the injection risk.
Audit Metadata