minimax-music-gen

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the mmx CLI tool for generating music and various system media players like mpv, ffplay, and afplay to handle audio playback.
  • Evidence: Multiple scripts including scripts/play_music.py, scripts/play_playlist.py, and scripts/vinyl_player.py utilize subprocess to launch and control these external processes.
  • [COMMAND_EXECUTION]: On macOS, the skill executes AppleScript via osascript to monitor the state of the system Music application and manage playback tracks.
  • Evidence: scripts/play_music.py and scripts/play_playlist.py contain dedicated logic to query Music.app state and trigger playback using osascript -e commands.
  • [EXTERNAL_DOWNLOADS]: The skill recommends the installation of the mmx-cli package from the npm registry and includes functionality to download audio files from the internet.
  • Evidence: SKILL.md provides installation instructions for the vendor's CLI tool. scripts/play_music.py implements a streaming and saving feature using urllib.request.urlretrieve to fetch audio from remote URLs.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 09:27 AM