bg-music-hq
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads generated audio files from Replicate's official infrastructure after the generation process is complete.
- [COMMAND_EXECUTION]: The script uses
ffmpegandffprobevia safe subprocess calls (passing arguments as a list) to trim audio and apply fade-in/fade-out effects to the generated tracks. - [DATA_EXPOSURE]: The setup and generation scripts include logic to check for a Replicate API token in the configuration files of related skills by the same author (e.g.,
bg-music,sound-effects), which is a convenience feature for users within the vendor's ecosystem.
Audit Metadata