audio-theater
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of
subprocess.runto callffmpeg,ffprobe, and scripts from sibling skills. These calls are implemented using argument lists rather than shell strings, which is a secure practice that prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: While the skill orchestrates multiple components, it does not perform any remote downloads or network requests. It relies on previously installed local sibling skills and system utilities, maintaining a strictly offline execution environment.
- [SAFE]: No obfuscation, data exfiltration, or hardcoded credentials were found. The skill's behavior is consistent with its stated purpose of providing a private, local-only audio production pipeline.
Audit Metadata