skills/pixazo-ai/skills/muse-voice/Gen Agent Trust Hub

muse-voice

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_SAFE]: The skill implements a secure credential management pattern. It prompts the user for a Pixazo API key and stores it in a local file (~/.pixazo/api-key) with restricted permissions (chmod 600) to prevent unauthorized access.
  • [EXTERNAL_DOWNLOADS]: The skill fetches model-specific documentation and schema definitions from the vendor's official website (pixazo.ai) to ensure it uses correct parameter names.
  • [COMMAND_EXECUTION]: Provides example curl commands for API interaction and an npx command for installing additional skills from the vendor's repository. These are standard developer tools and used appropriately within the context of the skill.
  • [METADATA_POISONING]: There is a logical inconsistency between the skill's metadata (which claims image generation capabilities) and the actual implementation (which describes speech-to-text transcription). This appears to be a documentation error by the developer rather than a malicious attempt to deceive.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 09:01 PM