add-audio
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run
npm run buildat the end of the implementation phase. This is a standard development practice for verifying that the new code does not break the build process. - [DATA_EXPOSURE]: The skill reads internal source files like
src/core/EventBus.jsand scene files. This is necessary for its stated purpose of identifying game events to wire audio triggers and does not involve accessing sensitive user credentials or environment variables. - [REMOTE_CODE_EXECUTION]: The skill explicitly states it has 'Zero dependencies' and uses only the native Web Audio API synthesized in the browser. It does not download external scripts or execute remote code.
- [SAFE]: The implementation of an
AudioManagerandAudioBridgeusing the Web Audio API (OscillatorNodes, GainNodes, etc.) is a standard, safe way to handle audio in web applications. The practice of requiring a user interaction (click/tap) before starting audio is a requirement of browser security policies.
Audit Metadata