audio-theater

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of subprocess.run to call ffmpeg, ffprobe, and scripts from sibling skills. These calls are implemented using argument lists rather than shell strings, which is a secure practice that prevents shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: While the skill orchestrates multiple components, it does not perform any remote downloads or network requests. It relies on previously installed local sibling skills and system utilities, maintaining a strictly offline execution environment.
  • [SAFE]: No obfuscation, data exfiltration, or hardcoded credentials were found. The skill's behavior is consistent with its stated purpose of providing a private, local-only audio production pipeline.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 09:08 PM
Security Audit — agent-trust-hub — audio-theater