per-track-loudness-normalization
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides
grepcommands designed for local source code auditing. These commands allow the agent to verify the implementation of session guards and gain clamping logic within the project's Kotlin files. - [INDIRECT_PROMPT_INJECTION]: The skill describes a pattern where track metadata (
loudnessDb) influences the application's audio gain settings. It explicitly provides defensive logic to validate these inputs, mitigating potential issues from malformed media metadata. - Ingestion points:
format.loudnessDbinMediaServiceHandlerImpl.kt. - Boundary markers: None (numeric metadata).
- Capability inventory: Controls system audio gain via the
LoudnessEnhancer.setTargetGainmethod. - Sanitization: Implements a range check (
if (it !in -2000..2000) 0 else it) to reject invalid values. - [DATA_EXPOSURE_AND_EXFILTRATION]: No patterns related to sensitive data exposure, credential harvesting, or unauthorized network communication were detected. The skill's operations are confined to local file analysis and audio lifecycle management.
Audit Metadata